Women’s ‘red flag’ app Tea is a privacy nightmare
-
Wow just two days ago I see a post about how Lemmy is dominated by men and how that could become a problem, and today I see a comment section where all the incels come out of the woodwork.
"waaa somebody wants to solve a problem that has never affected me I'm the victim"
"omg what if people talk behind my back they might find out I'm an asshole? literally 1984"
"wadabout if this app was racist?!? checkmate"
I'm not saying this app is good or bad (I can definitely see the problems) but if an article about cybersecurity gets posted and this is our first reaction, makes me lose hope in Lemmy.
Edit: Responses have made very good points and I think I was off, thanks guys. I still think some of the early comments I encountered were rather reactionary
You make a valid point, this platform absolutely shits on anyone without technical knowledge, just look at the hundred or so smug replies telling you what flavor of Linux they run if you mention a problem with Windows. So, no surprise everyone is focusing on that, and not the human aspect here.
Having said that, there is a power imbalance to this that I really don't like, the accuser gets to hide behind a veil of anonymity, and the accused has their name published, and is forced to defend themselves.
-
it’s up to the person being reported on to prove the accusations are false.
The person doesn't even know they're mentioned in the app.
Which is even worse, because unless someone tells them, they're blissfully unaware.
With most forms of Libel, at least the victim will see it in a timely manner.
-
You make a valid point, this platform absolutely shits on anyone without technical knowledge, just look at the hundred or so smug replies telling you what flavor of Linux they run if you mention a problem with Windows. So, no surprise everyone is focusing on that, and not the human aspect here.
Having said that, there is a power imbalance to this that I really don't like, the accuser gets to hide behind a veil of anonymity, and the accused has their name published, and is forced to defend themselves.
So, no surprise everyone is focusing on that, and not the human aspect here.
This is a technology community and the article is specifically about a security breach that exposed massive amounts of sensitive user data.
-
Change the target to any other group and the outrage would be 100-10000 fold bigger.
Try it out, instead of Women rating men, try subbing in various minority groups or races.
Bonus points for the most offensive combinations.....
e.g. Russians rating Ukrainians in your area....it can get pretty bad...I can think of many worse combos.
I'm sorry but I'll just say it out right: new feminists are the absolute worst
Don't get me wrong, I'm all for equality where possible. Where isn't equality possible? Well I'd like to conceive a child, but the plumbing isn't exactly useful for that. That sort of thing. Beyond that, were all the same, and IDGAF about your skin color, sexual preferences or whatever. I live by live and Let live, don't be an asshole, it's not that hard to be respectful
New feminists though are the ones coming up with ideas like this website. On the surface, anyone could say that it's not a bad thing to have a place for women to talk about how to protect themselves. In reality though, it's a place where men, innocent or not, get doxxed and made to be rapists.
There are some subs here on Lemmy as well that were very sad to see this shitshow of a website go, lamenting the fact that now they need a different place to dex people. Try not to tell them that doxxing is bad, it gets you banned.
-
This post did not contain any content.
Lots of men in this thread real upset about this app pointing out how the majority men are shit
-
Lots of men in this thread real upset about this app pointing out how the majority men are shit
Defaming people without giving them a chance to defend themselves, talk about shit people...
-
i wonder if there’s the potential for a different app with more encryption and a way to prevent doxxing and abuse.
Encryption, sure.
Preventing doxxing? I highly doubt it. But hey, it's women doing it so it's ok and anyone who criticizes that is an incel.wha? i didn't say anything about incels. or that doxxing is ok.
-
Hey Nima, I heard you like have to sex with dogs.
Good luck proving you dont.
uh hello! ok? not sure what your fetishes have to do with the conversation that was taking place. maybe you're from the UK and you're missing porn?
But I wish you the best of luck in your search for whatever porn you like.
-
I'm certainly no web security expert, but shouldn't Tea's junior network/backend/security developers, let alone seniors, know how to secure said Firebase or S3 buckets with STARTTLS or SSL certificates? Shouldn't a company like this have some sort of compliance department?
It's a little more complex than that. If you want the app on the user device to be able to dump data directly into your online database, you have to give it access in some way. Encrypting the transmission doesn't do much if every app installation contains access credentials that can be extracted or sniffed.
Obviously there are ways around this too, but it's not just "use TLS".
-
Honestly it seems like a weapon that can too easily be used for defamation
I mean, yes, but does that take priority over women who are worried about their safety? There's been women doing this over local Facebook groups for a long time. Defamation of this sort is not a new issue.
-
It's a little more complex than that. If you want the app on the user device to be able to dump data directly into your online database, you have to give it access in some way. Encrypting the transmission doesn't do much if every app installation contains access credentials that can be extracted or sniffed.
Obviously there are ways around this too, but it's not just "use TLS".
Encrypting the transmission doesn't do much if every app installation contains access credentials that can be extracted or sniffed.
Encrypt the credentials then? Or OAUTH pipeline, perhaps? Automated temporary private key generation for each upload (that sounds unrealistic, to be fair)? Can credentialing be used for intermediary storage that encrypts the data on that server and then decrypted on the database host?
Clearly my utter "noobishness" is showing, but at least it's triggering a slight urge to casually peruse modern WebSec production workflows. I am a DNN researcher. Thus, I am far removed from customer-facing production environments, and it shows.
Any recommendations on literature or articles on how engineers solve these problems in a "best practices" way that you can recommend? I suppose I could just look it up, but I thought I'd ask.
Edit: I don't know why I'm down-voted. My questions were sincere.
-
Lots of men in this thread real upset about this app pointing out how the majority men are shit
It's an antisocial surveillance system for antisocial people, and creates a(n even more) antagonistic relationship between men and women.
Dating apps have been a disaster for dating, and this is perhaps the worst among them.
-
It's a little more complex than that. If you want the app on the user device to be able to dump data directly into your online database, you have to give it access in some way. Encrypting the transmission doesn't do much if every app installation contains access credentials that can be extracted or sniffed.
Obviously there are ways around this too, but it's not just "use TLS".
Wouldn't some sort of proxy in between the bucket and the client app solve this problem? I feel like you could even set up an endpoint on your backend that manages the upload. In other words, why is it necessary for the client app to connect directly with the bucket?
Maybe I'm not understanding the gist of the problem
-
Lots of men in this thread real upset about this app pointing out how the majority men are shit
Citation of course needed with that one.
The only people who will be listed on the app are people who are either deserving they've been on there or people who don't deserve to be on there but some woman in their lives has decided to inact some vengeance justified or otherwise.
-
Lots of men in this thread real upset about this app pointing out how the majority men are shit
What are you basing the majority of men are shit on? Confirmation bias?
-
I mean, yes, but does that take priority over women who are worried about their safety? There's been women doing this over local Facebook groups for a long time. Defamation of this sort is not a new issue.
It was defamation the entire time just because somebody made it an app rather than a Facebook group doesn't make any difference. It was always a crap thing to do.
Of course Tea took it to an entirely new level of stupid.
-
uh hello! ok? not sure what your fetishes have to do with the conversation that was taking place. maybe you're from the UK and you're missing porn?
But I wish you the best of luck in your search for whatever porn you like.
Weird, this app I have says its true that you like to have sex with dogs. It's encrypted and safe on my end, so it's totally fine!
-
it seems its an app that helps women flag potential dating candidates as being dangerous or red flags.
there is the potential for doxxing that comes with that, but I can absolutely understand its use and need when not abused in that manner.
i wonder if there's the potential for a different app with more encryption and a way to prevent doxxing and abuse.
i wonder if there's the potential for a different app with more encryption and a way to prevent doxxing and abuse.
You would have to have everyone take a polygraph or something (not that they actually work but a lot of people don't know that so maybe it would prevent them from lying in the first place). There's no way to prevent people from lying for whatever reason they have and there's no way to detect whether or not the thing they have posted is truthful.
The truth is as much benefit as the app may have when used properly the risk of abuse is far too high for it to ever be workable.
If you have a smoke alarm in your house that occasionally explodes and sets your house on fire, but the rest of the time actually works as a fire alarm, then it's not a useful product, as even if the chance of it exploding was less than 1% it would still eventually blow up your house, whereas if you never installed the alarm there was every possibility your house will never catch fire. So game theory suggests that you are better off without it.
Same with this app, sure it might prevent you experiencing a bad date but there's every possibility that it will also cause you not to date somebody who's actually a nice person. You are far better off just making that judgement yourself as you always did. And to be clear given human nature, the likelihood of the "fire alarm exploding" is probably a lot higher than 1%
-
It was defamation the entire time just because somebody made it an app rather than a Facebook group doesn't make any difference. It was always a crap thing to do.
Of course Tea took it to an entirely new level of stupid.
It was potentially defamation when it was just women...talking to one another, too. This seems like a pretty solid case of men looking at something women do to protect each other, and saying "...but what about the men who could be negatively affected in some cases?" I also think the tone in which this is being discussed is pretty revealing about Lemmy's demographics.
-
Weird, this app I have says its true that you like to have sex with dogs. It's encrypted and safe on my end, so it's totally fine!
mazel tov!