i wonder if there's the potential for a different app with more encryption and a way to prevent doxxing and abuse.

You would have to have everyone take a polygraph or something (not that they actually work but a lot of people don't know that so maybe it would prevent them from lying in the first place). There's no way to prevent people from lying for whatever reason they have and there's no way to detect whether or not the thing they have posted is truthful.

The truth is as much benefit as the app may have when used properly the risk of abuse is far too high for it to ever be workable.

If you have a smoke alarm in your house that occasionally explodes and sets your house on fire, but the rest of the time actually works as a fire alarm, then it's not a useful product, as even if the chance of it exploding was less than 1% it would still eventually blow up your house, whereas if you never installed the alarm there was every possibility your house will never catch fire. So game theory suggests that you are better off without it.

Same with this app, sure it might prevent you experiencing a bad date but there's every possibility that it will also cause you not to date somebody who's actually a nice person. You are far better off just making that judgement yourself as you always did. And to be clear given human nature, the likelihood of the "fire alarm exploding" is probably a lot higher than 1%

It was potentially defamation when it was just women...talking to one another, too. This seems like a pretty solid case of men looking at something women do to protect each other, and saying "...but what about the men who could be negatively affected in some cases?" I also think the tone in which this is being discussed is pretty revealing about Lemmy's demographics.

mazel tov!

But have you considered man bad?

It's not defamation if it's true

Oh come on, you know how Those People are

A lot of people have speculated that.

According to their statement their code was written in Feb/2024 and predates "vibe coding"

And its legally actionable libel/slander if false.

Yeah, because only men are talking about this.

Well im a man. And most men i interact with are casually misandrist, ableist and homophobic. I can't imagine they behave any better when they're trying to fuck you

Lots of misandrists in this thread framing security failures as sexism against men

Lots of misandrists in this thread framing security failures as sexism against men

No one is saying THAT'S misogynistic. We're saying there are a bunch of stupid misogynistic comments in this thread, not that the app is cool.

S2 Underground has a great video about this. It's basically a spy app with national security implications.

People using their military IDs for account verification and location data found in their pictures lays the argument that this data could be used for blackmail.

Considering even the mere accusation can ruin someone's life? Yes.

The problem isn't women don't deserve to be safe, the problem is we cannot just give people powerful weapons with no oversight or burden of proof to be deployed simply because a date didn't go well.

Facebook or App, the danger is too great

For what it is worth. I am a woman and I still think this app is wrong.

It can be both.

So many problems are caused because society assumes cisgender women are always victims and anything that looks like a man if you look at it long enough is an abuser.

SSL is not the tool you need in this case, although you should obviously already be running exclusively on encrypted traffic.

The problem here is one of access rights - you should not make files default-available for anyone that can figure out the file name to the particular file in the bucket. At the very least, you need to be using signed URLs with a reasonably short expiration, and default all other access to be blocked.

My hey we’re probably using Firestore as their database without authenticating their api calls to firebase functions. Basically leaving their api endpoints open to the public Internet.

They could have connected service account and used some kind of auth handshake between that and generate a temporary login token based on user credentials and the service account oauth credentials to access the api. but they probably just had everything set to unauthenticated

You could easily convince me that it was a brilliantly executed honeypot. It's just too damn poetic.

"It's a women's safety app" No it wasn't. This app was about women's safety as much as the recent payment processor porn game censorship bullshit was about child safety. This was about slandering men for fun because women love gossip. The app's name was "Tea."

Not a single woman who signed up for this app stopped to think, "Here's a brand new app, just came out, has no track record, no reputation. I don't know who runs this. I don't know how they secure their database. I know what they're asking, they want a picture of my government-issued ID. We've spent the last two decades reading news headlines of the pattern "tech company was hacked, 2.2 million users compromised including emails, home addresses and SSNs" on a weekly basis. There hasn't been a week gone by since Dubya was president that hasn't happened."

The women who uploaded pictures of their IDs to some app really had their own safety in mind. Turns out you can short circuit that whole process with hilarious ease if you say things like "women only" and "slander your exes."

I don't think I could have constructed a better example as to why all the recent "prove your identity" shit is comprehensively retarded.