No idea why they were collecting identification then.

Even worse, since the hackers got a bunch of the data at once, the company must have held onto those pictures long after they registered people to their service, which they likely didn't need to do.

The app required ID uploads ostensibly to verify that you were a woman signing up, men were not allowed to join for obvious reasons

Yes, trying to warn other women about a man you dated who abused you or gave off weird vibes is definitely the same as getting your nudes or porn video of yourself leaked against your will onto the public internet for everyone to see

As usual on Lemmy, the answer is just for women to shut up and listen to what the men want

easy to say, but that depends entirely on the government and company doesn't it?

Nice site you got there! Made from scratch or using some service/app?

Friendly reminder that some services do need your ID otherwise they cannot help you or at least they need to very you (accountants, notaries, etc)

edit: I can´t do your tax report if I 1 don´t identify you and 2 I don't have the social security for which I need to do the report

The original incarnation on Facebook got sued for posting libel and shut down. There's no judge of truth on these apps it's all she said and no he said.

Any government already has all of that information, so, no.

By giving it to a company, you just increase the risks of info leakage.

I mean. A social database I feel is toxic in of itself. It's makes forgiveness harder, it makes changing yourself harder. What's the point in changing if people are gonna look you up in a database like this and perhaps forevermore treat you as if you are like that in the present day, forever. It assumes that humans are unchanging, that once a shitty person always a shitty person.

As always life is complicated.
I am talking about my personal situation.

^(Do I really need to put a disclaimer to all posts, that mentions all comments are from my own view and might no apply to every situation in every country?)

But are they abusers? You sure they ain't just getting revenge on an ex, making them undateable. How do you even validate this information?

Yea cause that's what these sites totally were doing.

Everyone knows what these places were. 4chan are fucking scumbags but so are the people using these gossip sites. They're both cut from the same cloth

also fucking AirBnB

I can't wait till I read a similar article about porn sites; especially one where the doxxed individuals are politicians.

The only entity able to connect you in this case is the identity verification third party. The premise is that a government-backed identification system is more secure than a rando private company.

Private company asks government "hey is this user real and unique", government replies "yes". Private webiste does not need to know your ID. No identifying element needs to be transmitted by the government.

Of course some private companies will need more, and in that case the user, you, can grant them access to data, much like the current authentication systems using Google accounts & co.

In which case the flow would be:

• Rando insecure company asks government "is this user real and unique? I need their name"
• Government website asks you "this rando company wants to know your name"
• You accept
• Goverbment replies to rando insecure conpany "yes, user real, name is X"

That's how it should be.

They wouldn’t see what sites you give the tokens to — unless those sites choose to phone home, for some reason.

• You log in to the government site
• You ask for a token to prove your age/gender/whatever
• You copy the token
• You go to the age/gender-restricted site
• You provide the token
• The restricted site asks the government site how to verify any arbitrary token (but doesn’t mention your specific token)
• The restricted site verifies the token

Iirc, it's so that only women can join the app.

Which is not a good reason to upload photos of drivers licenses.

Horrible practices by this app yes still can't help but feel anon seems to think he is a hacker for writing a python script to scrape a public database. Also scold app devs for not dealing with sensitive information carefully, release them in the most vile online platform possible so you can boast about your average python scripting skills?