Horrible practices by this app yes still can't help but feel anon seems to think he is a hacker for writing a python script to scrape a public database. Also scold app devs for not dealing with sensitive information carefully, release them in the most vile online platform possible so you can boast about your average python scripting skills?

Oh, agreed, it's just some gatekeeping process for sure.

This is a super weird point to focus on from that whoooole situation.

Just goes to show how lost you are in your feminist supremacy bubble, that even leftist spaces like lemmy think this thing is creepy.

This already happened in my country, Secret was an app that got huge while I was finishing high school, an anonymous platform for people to confess private stuff, it rapidly became bully culture and libel central.

Contacting police?

Not to me, yes the app sucks, yes the use case of the app also sucks, yes devs are either super green or even mostly AI (these have been discussed extensively and I agree with all).

But can't commend public release of such sensitive data in such a place. You can still bury this app and the company without compromising people's sensitive data. Makes for less of a show and less opportunity to boast but yea.

If someone doesn't want to date you because of gossip they read online, then you dodged a bullet. The garbage took itself out.

Do you think X should be shut down because some users use it irresponsibly?

Reddit?

Lemmy?

Aside from the fact that it was stored in a public database, there's no need to store photos of the IDs at all. The account can just be marked as verified and move on.

Also I doubt that measure would keep a man out if he really wanted to join...

That's exactly what hacking is.

'90s hacking movies may have given you a different idea of what cybersecurity looks like, but this is what the real world is like

Also, Google deserves a scolding here. Firebase's default configuration is absolutely atrocious. One of the few critical vulnerabilities I've seen where the system is working as intended. Dubbed the hospital gown vuknerability because they leave the backend wide open by default

yes devs are either super green or even mostly AI

Solely blaming the devs tells me you have no experience with Firebase security

In turkey, the government stores data words than the company. I can be doxxed just by giving you hints of which city I live in. It's bad

No I don't but if the firebase sucks isn't it devs job to be knowing this? They might have warned their supervisors and simply disregarded, that is also another possibility in which case the blame obviously goes to higher up not the devs.

I mean this is just writing a script to access a public database, this is not even exploiting a code vulnerability. So there is an area between digital number waterfalls on the screen and accessing a public database which I would consider more of hacking.

I assume OP actually meant the additional info the government can get from where I authenticate with my goverment ID to a company.

Hypothecial situation: You wanna buy a sex toy.
If the goverment does store where and what you buy, they could punish you by withholding services.
And they might not say why and give a bs excuse or send you on a goose hunt to do more paperwork.
You can suspect that but probably never proof that it was the case.

Firebase's default configuration

I'm going to get on my grumpy old man soapbox. I understand making things idiot proof for end users. End users are idiots. But do we have to make things super safe for developers now too? Do we want to add a warning to rm so we don't accidentally remove the wrong directory?

Any developer who doesn't know to check permissions and accessibility on their database deserves to have their AI vibe coding bot taken away.

Thanks. Built from scratch.

I understand the reasoning for the public intent of the app and would generally support it within reason cause society right now amirite.. but its not so subtle real world application has now leaked a DB of catty women for whom the majority ALSO show massive red flags. This isn't a sexist men vs women critique, if there was an app for men to rate women and dox them I'd feel the same way. Love it when shitty people bamboozle themselves.

Alright, but none of that was really relevant to this comment. Why are you soapboxing on it?

Actually UK licenses are pink. Provisionals are green

I mean, we kinda already ended up there with the Ashley Madison hack in 2015. Problems with that site aside, I feel like it's kinda the blueprint for everything wrong with companies that retain personally identifable info on folks. If a company collects details like your driver's license, it's not a question of if it gets out but when. There's just no way to collect that sort of data and truly keep it safe.

But, it seems like we've kinda forgotten how to learn lessons in the modern day, so I'm sure this was an isolated issue and we'll never see it's like again.

(/s on that last part, just in case that wasn't blindingly obvious.)