Tough to say :) Vaguely reminiscent of SNI troubles on the web server... which can depend on the client. I thought that was becoming exceedingly irrelevant, though.
>DRIVERS LICENSES AND FACE PICS! GET THE FUCK IN HERE BEFORE THEY SHUT IT DOWN!
>Tea App uploads all user verification submissions to this public firebase storage bucket with the prefix "attachments/": [link, now offline]
>Yes, if you sent Tea App your face and drivers license, they doxxed you publicly! No authentication, no nothing. It's a public bucket. I have written a Python script which scrapes the bucket and downloads all the images, page by page, so you can see if you're in it: [pastebin link]
>The censoring in picrel was added by me. The images in the bucket are raw and uncensored. Nice "anonymous" app. This is what happens when you entrust your personal information to a bunch of vibe-coding DEI hires.
>I won't be replying to this or making any more threads about it. I did my part, God bless you all. Regards, anon
Being so careless with people's personal data should be a major crime, tbh. If I manipulated thousands of people to let me scan their passports and various other bits of personal info, then just left the copies around the city for people to find, I'd be prosecuted, and rightfully so.
Car dealership associations have pretty impressive lobbying capabilities. In many (most?) states you must buy a new vehicle from a dealer - it's against the law to buy direct from the manufacturer.
You can’t just quote from a PR puff piece and expect anyone to be convinced it is not a doxxing app.
The proof is in the pudding.
It was built for doxxing and quite potentially spreading lies about men and on top of that, they doxxed all of their users, too. They pretty much doxxed everyone who used the app or was mentioned on the platform.
I don’t see how it is not a doxxing app, but go ahead and find me another PR article that says it is the best thing since sliced bread and the founders should be saints.
I don’t know the ratio of real to fake info on Tea, but all ways to provide information about someone are subject to fabrication of inaccurate information.
Many years ago when newspapers, magazines, or books wrote about someone, at least some of the time they may have tried to verify part of the information.
Today, there’s very little expectation that something on an app or website has been partially or thoroughly fact-checked.
For the sake of argument, let’s say 20% of the data is fabricated.
If 80% of the information on Tea about others being a safety risk were true, would that be worth chancing that 20% would have false information spread about them, mostly quietly to a small percentage of the population in a way that didn’t really affect their lives substantially?
I’m not defending Tea losing their users’ data nor defending those that spread disinformation.
However, if the majority of the data were correct and helped others, and if the incorrect information didn’t destroy or substantially affect someone, then I think it may have been better to have had the 80% truth, if it were to have prevented violent crime.
Also newspapers would generally only discuss public figures or major crimes, not smear small time individuals who lack the funds to pursue legal remedy. This app is truly disgusting. If you support it, do not talk to me.
Apparently, the red flags also include "has ghosted me" and "is married." Now, those are valid reasons to not date someone, but it's not safety. Safety is just the excuse, just like it is in so many other cases.
It's fucked up that you can't have an honest app to keep people safe, but the makers could have known the problems in advance, and probably did.
> One user’s story stands out
In which precisely nothing happened. We don't even know the nature of the alleged violence.
> It's expected that anon is misogynist
Did you just give a negative impression of someone you don't know?
Why are you defending blatant and exceptional incompetence?
Also I don’t think there was much actual “hacking” involved?
Regardless if you throw out a box full of other people’s passports/driver licenses/etc. out your window you can’t really blame the people who picked them up for not bringing them back to you.
I don't care about the company and I'm not defending it. I don't have sympathy for the bad faith gossipers getting doxxed. But there are going to be legitimate users who gravitated towards the app for the real safety need. Doxxing this kind of user base means real women are going to get killed by their obsessive stalkers.
It was a choice to exfiltrate this data and distribute it on 4chan.
yeah we can blame the 4chan user and his fans all you want but boy what a blunder, did the company just think "security by obscurity" or something? its just like the march of bad software and practices out there
It's an app that exposes the identity of people against their will. That's the exact definition of doxxing.
Whether the original intent was honourable or not - or if they decide to spend part of their income to a honourable cause - does not factor in to the nature of the system.
Worse, in some jurisdictions (I’m not certain about the US specifics), this kind of unsanctioned exposure could actively hinder legal prosecution of actual predators. If a person is publicly accused on a non-official platform before trial, any resulting lawsuit might be thrown out on grounds of prejudicial exposure or even perjury. The accused could claim that the testimony is tainted or retaliatory — particularly if the platform enables near-anonymous posting without formal vetting^1.
[1] Yes, the app collects driver’s licenses. But let’s be honest: in the U.S., a fake driver’s license is practically a rite of passage. Entire generations of underage teens have used them to get into clubs and bars. If that’s your trust anchor, you don’t have much of one.
It feels broken because it is broken. But if you weaken procedural safeguards to ‘fix’ it, you don’t get justice - you get lynch mobs. Sometimes quite literally. There have been people beaten to death by neighbors because they were declared a sexual offender online - which later turned out to be wrong.
A criminal justice system has to protect even the accused against injustice. If it doesn't, it's not justice, but just a kangaroo court.
this app is replicating a set of women only facebook groups. there's one for every major US city. it's sort of an if you know you know situation.
the vast majority of posts are speculation on someone being douchey or a cheater. women in their twenties seem to really enjoy browsing through the gossip.
To be fair, and not that you're saying otherwise: that seems like a pretty natural and chill response to the fact that men have always been assaulting and raping them. Like, it would be weird if women didn't ever speculate on which men could be a threat.
> One user’s story stands out: Sarah, a 28-year-old from Chicago, posted about her ex, who seemed charming but turned violent. After escaping the relationship, she learned he was active on dating apps. Her Tea post detailed his behavior
How hard would it be to believe that none of that was true and the woman was being vindictive?
They can, but rates of domestic violence are so high that it seems reasonable to want to do something about it.
I dated online a few years ago and met my partner. In that time I met 4 women for dates who talked about really scary behaviour from previous men they’d met. These weren’t even relationships… just dates they’d met for coffee or whatever. These women had no reason to lie or exaggerate to me - and I’d probably prompted the conversation by asking about “how has it been on hinge” or whatever.
I think we need to remember throughout all of this just how badly behaved many men are, and how normal misogyny has become.
I’m a guy. I was stabbed by one ex, while she was drunk, dated another girl for a year only for her to suddenly drop the “my boyfriend in the army is coming home” bombshell, and had another relationship that turned into violence and stalking.
I think we need to remember that this isn’t a one-way street.
> In New Zealand, the twenty-one year Dunedin Multidisciplinary Health and Development Study, published in 1999, reported that of their sample of 1,037 people, 27% of women and 34% of men reported being physically abused by a partner, with 37% of women and 22% of men reporting they had perpetrated intimate partner violence.
> A growing body of international research indicated that men and women experience Intimate partner violence in some similar proportions. An example might be a recent survey from Canada's national statistical agency that concluded that "equal proportions of men and women reported being victims of spousal violence during the preceding 5 years (4% respectively)."
> The aforementioned surveys indicate that small proportions of men (less than 20% of victims) will tell the police or a health professional about their victimization. This may be due to well-grounded fears that they will be scorned, ridiculed, or disbelieved by these authorities.
Your point that it's "highly asymmetrical" is just wrong.
> Indeed, a recent research paper by Dr. Elizabeth Bates from the University of Cumbria found that the overarching experience of male IPV victims was that "no one would ever believe me."
And it directly contributes to the toxic attitude around male victims of domestic violence.
Thanks for sharing! I was surprised by it to be honest. The country I’m coming from husbands beating wives were quite common, and I don’t think statistics was as equal as this one.
Homicide rates are still asymmetrical, but I was surprised that also not as much (like 1.5 times difference).
The reported incidences account for the bias - as the parent notes, men are much less likely to report domestic violence.
When I was stabbed, I took myself to hospital and said I did it myself, accidentally - she was a trainee barrister and I didn’t want to fuck her career up, plus “my girlfriend stabbed me” is usually going to get you “oh yeah, and what did you do to deserve it?” and police questioning in response.
This is a very sensible topic ... and sensible topics need careful solutions, not 'let's reinvent a medevial town square's pillory'.
Western society has become actively anti-dating lately (think: ever since the 1980s). People, especially women, are actively encouraged to scrutinise even minor behaviour for red flags, after all, every man is a potential serial killer. This is so prevalent that we have made movies about that sort of paranoia ... and there are people in treatment over it. Clinically, this is often referred to as hypervigilance/paranoia syndrome, a pattern related to PTSD — both as a consequence of trauma and, paradoxically, as a source of relational dysfunction.
This is not meant to downplay the reality of actual assaults. But it points to a deeper systemic issue: The drive to protect against potential violence has, in some circles, taken on a life of its own - and in doing so, it has poisoned trust.
So - I do not claim your 4 women were not at some point scared by a guy during a date. But what used to be considered 'assertive, reliable, masculine' behaviour in the 1950s has become 'prelude to slaughter' these days, especially when other factors are present (e.g. 'he doesn't turn out to be Prince Charming that I expected' or 'he decided to split the bill').
So ... if there is an actual case of domestic violence, the solution is not to create an instrument that can be badly abused and does not follow rule of law - it is to go to ... law enforcement, and let the courts deal with it. IF the guy is a problem, let them put him away, rather than slandering him online.
For a sense of scale here. One guy had brought a bag of sex toys to a first date.
Another called (a different woman) a “dirty bitch” when she declined a second date.
Amongst my female friends, I’ve become aware only in my late 40s just how many have suffered sexual assault outside of relationships or controlling and abusive behaviour within them.
I guess what I’m saying is that I think women being vigilant is rational behaviour. In my twenties and thirties I just lacked the imagination to see that colleagues and even male friends would behave in this way, but that can and have.
I don’t think this site is necessarily the right way to fix the problem, but I can totally understand the motivation.
Thank you for providing scale. From how you describe it, these two examples - while unpleasant - likely fall below the threshold for criminal prosecution. And it’s precisely in that gray area where public shaming platforms risk becoming instruments of mob justice.
The “sex toy guy” (and yes, I now imagine the most awkward and presumptuous version of that scenario - perhaps with a flourish of presentation) is clearly socially tone-deaf. But if no coercion or violence took place: Should his name and face be broadcast online so he can be branded “The Dildo King” for life?
The “dirty bitch” guy? Rude and vulgar, certainly. But how many women have made disparaging comments about men — their height, their hair, their genitals - sometimes in front of them, sometimes with friends? We should strive for dignity and respect on both sides. If we accept social shaming as a norm, it shouldn’t surprise us when the pendulum swings both ways - and no one wins in that world. Was the woman in this case threatened or harmed beyond a verbal outburst?
Being in my mid-40s, I’ve also witnessed what a false or misguided accusation can do to a man - careers destroyed, relationships severed, even suicides.
What we’re dealing with is a cultural and moral challenge - not a technological one. And cultural problems can only be solved through dialogue, mutual respect, and shared norms - not through factionalism or digital vigilantism.
First: "That makes me deeply uncomfortable, so I'm going to leave"
Second: Tough to say, probably nothing if that's the end of the communication. I hear stories pretty regularly of men being misled into taking someone out on the first date, paying for it, and then finding out a second date or anything beyond that was never on the table for one reason or another. It's definitely rude and vulgar, and people should reserve that for special cases.
You sound bitter about women saying "yeah I'll give it a try, I guess" instead of just saying "no". That first date that probably won't be a second date is your chance to do your sales pitch.
Overall, I think people are bitter that dating has such a low probability chance in providing the outcome they desire. But you have to know that going in; "you look good in these 3 pictures and I liked your witty quote" is not necessarily going to lead to a lifetime of happiness. You probably have to expect 1000 failures for every success. But you only need one success.
I can see how I sound that way, but im saying so I think you're assuming more than you should. I meant more like going out on that first date, and then finding out she's a lesbian, but:
> That first date that probably won't be a second date is your chance to do your sales pitch.
Is the ideal case, and would be the nature of a good date if those were the parameters within which both parties agreed to go out, but if I was actually bitter about:
> "yeah I'll give it a try, I guess" instead of just saying "no"
I would think that would be a somewhat justified reason to be pissed, maybe, depending on how the circumstances came about and how frequently that occurs, because it's a failure of communication that's quite pervasive and imo insidious outside and inside dating. Conflict avoidance in general leads to ghosting, excessively specific expectations regardless of sex, ambiguity around consent, and not being able to say "no" is a bad thing.
> Overall, I think people are bitter that dating has such a low probability chance in providing the outcome they desire. But you have to know that going in; "you look good in these 3 pictures and I liked your witty quote" is not necessarily going to lead to a lifetime of happiness. You probably have to expect 1000 failures for every success.
This part I mostly agree with. It's at least an admirable level of pain tolerance and persistence that one would hope pays off eventually, as well as a good way to align yourself.
> But you only need one success.
If you get really lucky, one success, but let's be real, it's hard to nail it one go, let alone 2 or 3, so I disagree needing one success.
Ultimately I don't personally have any reason to be bitter, but I have a lot of early 30s single friends that just... aren't really having much luck for a variety of reasons, including those mentioned above. My friends of both genders, at this point in their life, seem to have a perfect image of what they'd want in a partner, or an accumulation of red flags that—some of which—would be relatively trivial to overcome if you had an established friendship prior. Reminds me of Seinfeld a bit, someone gets caught picking their nose and you can't recover.
I'm not disputing any of that but the idea that you can trust what you read on an app like that is the issue.
Trust is a hard thing to come by online, even when people aren't anonymous and speaking publicly (Facebook or any other online place where one might use their real name). Giving people the cover of privacy from the person they are reporting about isn't going to increase the veracity of what's posted.
We already know how people behave online. It's either naive, ignorant or negligent to think otherwise.
Or form a lynch mob and stand behind your lynching.
But don't cry when you have chosen the route of self organized violence with zero checks and balances, clear examples of lynching the wrong people, then running and hiding back behind "civilized society" when your inept violence backfires.
You are no different to Kiwi Farms, I suggest you look to their site for tips on how to protect yourself while being violent on others.
Kiwi Farms also has a list of sexual abusers they have helped stop, some really horrific people.... but like "Tea" that's not the full story.
> Being so careless with people's personal data should be a major crime, tbh. If I manipulated thousands of people to let me scan their passports and various other bits of personal info, then just left the copies around the city for people to find, I'd be prosecuted, and rightfully so.
Good analogy. Also, this is the main point of the EU GDPR.
> That app made a lot of basement dwelling chuds furious, to the point that someone was willing to risk prison time for a shot at harming those women.
Although undeniably, the data being mostly women does bring in the chuds so it's not entirely wrong, I think this is a shallow take for a couple of reasons:
1. If any app stored user data this freely, it would be stolen and gloated over on 4chan.
2. This app, which I'm learning about just now, seems deeply problematic. It's a place for people to publically share and shame other people that they don't like. The genders of the people doing this doesn't matter, this is called doxxing and it's not ok, no matter how it gets dressed up (women's safety, children's safety, anti-terrorism, anti-drugs, whatever)
Are you being serious right now? No one forced those people to upload their data to this sketchy site. Everyone with one brain cell would know the repercussions of uploading IDs to a no-name site
i think you are assuming a level of computer literacy that doesn't exist in the general population. most people seem to not actually know where data goes when they put it in their phone, how that data is used, or what actually happens on computers in general. They mostly appear as magic to them.
"Do not share personal information online" is a warning that has been heeded since the internet was created. You don't need tech savvy to understand that message, just as you don't need to know anything about zoos to understand "Do not enter the lion cage".
With tech savvy it is possible to understand the dangers well enough to dismiss the common advice in certain cases, but if you don't have it — you had better listen to what others are telling you. If you wish to dismiss it, you are on your own.
The problem is as follows: There is a subset of the population that tends to trust things you say, and this subset is fairly large.
The solution is that we need to make it so that the majority no longer trusts anything people say.
There will be no negative knock-on effects for this, I'm sure.
--
To be less glib, I don't really see a good outcome of this in the long term. If everyone developed the right level of op-sec given the amount of bad actors on the internet, we'd effectively never communicate with another person again.
I am being downvoted for being real. How is the general populous not aware of it? That's wild. Again, you have to be aware of this. It's like privacy 101
The general population hasn't taken privacy 101. They get asked to email their id to their doctor.
If turns out the doctor also hasn't taken privacy 101.
Naw. That’s victim blaming. People have a right to believe that if an online service or app requires identify verification that the data will be protected. If you provide your credit card to uber you assume they put a password on the database and do the things required to protect it.
The idiot no-technical founder failed to do even the most simple and obvious data protection.
Vibecoding is not an excuse. Ask how to secure the data and the AI will answer.
Of course it is right. Victims need to be blamed, else they'll just stupidly do it again. That’s what “blame” is for. But, sure, if 'Tea' snuck up behind these people then there would be some room for sympathy.
But this case is more like you sticking your fingers into an electrical socket, after being warned continuously not to do that, and then crying that it was the utility company's fault for putting something dangerous in your face.
We've been told since the advent of the internet to not share personal information online. If you want to take the risk, you have to accept the consequences. However, in this case the story is even worse as the intent of these people was to violate that rule not just for themselves but for other people as well.
If I lend you my car, and you park in Berkeley leaving your laptop open on the passenger seat... Yes it's your fault my window got smashed and I'd like you to pay for it. Is it your fault your laptop got stolen? Maybe, that's just semantics. But my window being broken is your fault because we all know thieves exist and look for items on seats.
So if you upload your id to a flash in the pan website, who's fault is it when the rookie website turns out to have expectedly low security?
Isn't this basically Peeple except gender locked to women? Peeple failed because they couldn't eliminate bias and gossip against anyone. If someone was jealous of another, for example, that person could just write false slander and claim it was real with no evidence. That would have affected the victim for jobs, dates, etc. So it was laughed at by VCs and everyone online and it shut down.
How is Tea even legal? Isn't this just a legal libel timebomb waiting to happen?
Defamation (libel and slander) consists of false statements (or direct implications) of fact. Actionable defamation consists either of those false claims that cause quantifiable damages, or that claim things that are per se considered damaging --- a specific and limited list.
"This guy is a creeper and treats romantic partners terribly" is pure opinion, and cannot be defamatory. The (rare) kinds of opinion statements that can be defamatory generally take the form of "I believe (subjective thing) about this person because I observed (objective thing)", where "(objective thing)" is itself false. "The vibe I get about this person is that they hunt humans for sport" does not take that form and is almost certainly not defamatory.
Under US law, providers are generally not liable for defamatory content generated by users unless you can show they materially encouraged that content in its specifics, which is a high bar app providers are unlikely to clear.
> or that claim things that are per se considered damaging --- a specific and limited list
Standard disclaimer that law varies by jurisdiction. However, that limited list typically includes claims that the person committed a crime. Many juristictions also include accusing someone of having a contagious disease, engaging in sexual misconduct, or engaging is misconduct that is inconsistent with proper conduct in their profession.
In other words, the types of things I would expect people to be talking about on tea overlap heavily with defamation per-se.
If the users were careful to make all of their statements opinions, that defense would work. However, I doubt that is the case. Instead, I expect many users to include example of what their ex did that led to their opinion; which gets directly into the realm of factual statements.
The provider protections are real, and likely protect the app from direct lawsuits (or, at least from losing them), but do not protect the app's users. A few news stories about an abusive ex going after their former partner based on what they posted in the app could be enough to scare users away. You don't even need to win the lawsuit if your goal is to harass the other person.
It does, but those bars to defamation claims are based on the US Constitution more than they are on state law. I think another way to put that is that I gave the maximally generous interpretation to the plaintiff there.
> "This guy is a creeper and treats romantic partners terribly" is pure opinion, and cannot be defamatory.
That is true. But i think untrained and emotionaly involved individuals will have trouble navigating the boundaries of defamation. Instead of writing opinions like “treats romantic partners terribly” they will write statements purporting facts like “this creep lured me to his house, raped me, and gave me the clap”. This is not an opinion but three individually provable statements of facts. Plus the third would be considered “defamation per se” in most jurisdictions if it were false. (The false allegation that someone has an STD is considered so loathsome that in most places the person wouldn’t need to prove damages.)
Unles specifically coached people would write this second way. Both because it is rethoricaly more powerfull, but also because they would report on their own personal experience. To be able to say “treats romantic partners terribly” they would need to canvas multiple former partners and then put their emotionaly charged stories into calm terms. That requires a lot of work. While the kind of message i’m suggesting only requires the commenter to report things they personaly know about. And in an emotionaly charged situation, like a breakup, people would be more likely to exagarate in their descriptions, making defamatory claims more likely.
> Under US law, providers are generally not liable for defamatory content generated by users…
This is true, and i believe this is the real key. Even if the commenters would be liable, the site themselves would be unlikely to become liable with them.
Worth pointing out that you're talking purely from a US point of view, and different countries treat slander and libel differently.
For example in the US, to sue for defamation you need to prove something is false, whereas in the UK the defendant has to prove that what they said or wrote (and are being sued for) is true.
(I've no idea whether this app had any non-US use, but thought worth adding this comment regardless since it's a general point about defamation law and being discussed on a site with a big international audience.)
A general plug that if you read this comment and thought “damn, 1st amendment law sounds complex and interesting”, you may want to check out https://www.serioustrouble.show/ , a podcast about legal news with a recurring focus on 1st amendment law and cases
It’s hilarious that we earnestly debate whether women should be allowed to have a space to speak anonymously about whatever the hell they want, but it’s completely unquestioned that 4chan is a perfectly legal operation.
The problem isn't that the site is anonymous. The problem is I, as a man, have no way to check to see if it contains false or defamatory information about me because you can't sign up as a man.
I have no problem with anonymity. But this site exists to allow spiteful women to break the law.
I guess a significant difference is than 4chan is fully public. Whatever anyone says there can be observed by anyone and refuted by anyone. You can’t secretly slander anyone there.
What happened on the tea app were probably not knowable, observable or refutable for those actually being doxxed or slandered.
That isn’t me saying 4chan is absolutely morally in the clear, but it’s still quite a significant distinction.
The difference _for you_ is in the public or private nature.
It seems like your argument is based on (1) the discussion being slander (assumption); and (2) the idea that you could refute it if it were public (good luck, low credibility, also most men would immediately respond with vulgar name calling and - at least if anonymous - threats).
Well, no. You could implement Tea as a ?chan and everyone knows what it’s for. When you make an app that attests to reputation, expect smart people to contradict your claims about enhancing personal safety and security.
>women should be allowed to have a space to speak anonymously
It was only anonymous for the women speaking there, but not for the men they were speaking about, hence the justified outrage, since anonymous strangers are gossiping/slandering you in a public online space behind a 2$ entry fee.
Would you also support if men had their own such public "safe spaces" to gossip anonymously about real women with their names? I can assure you it would be shut down immediately.
So then why do we allow double standards where only one sex should loose their right to online privacy?
The concern is that it is exclusive to only women, not only allowing, but encouraging them to post narratives about men who are not allowed on the app by policy. How is anyone going to verify the truth of these claims except the man, who is not allowed to look?
no its not. 4chan is meant to be ephemeral. threads vanish quickly and they arent archived by 4chan.org. you cannot search the website for peoples names and there is no data structure for finding and contributing to a “file” on individual people. and when doxxing of anyone especially a woman occurs it is taken down by any mod who notices it because it could create a huge legal headache. so youre literally completely wrong. weird
Men do not believe they have "sexual privileges". There is an entire community (I'm sure quite active on this website) of men who are notorious for not being able to have sex with anyone. Let me correct that statement for you.
Men get upset when they are, as a policy, unable to view the (not fact checked) things being said about them in a public internet forum.
Like the privilege to have their foreskin cut at birth en mass? Or the privilege to forever be mocked for purchasing sex toys? Is it the privilege of de facto not being allowed to admit your bisexual to most female partners?
I mean, you can't get pregnant and your sex hormone gives you stronger muscles by default. This gives you a little bit more control over sexual interactions; fewer lasting consequences, more control over how situations go.
I am not sure what problems you've run into purchasing sex toys. The retail outlets that sell them certainly don't seem to care who buys them, so I'm guessing you're upset with some past partner that didn't want them used without discussing it in advance? Just discuss it in advance and realize that sometimes your partner is going to say "no" to your desires. It's a partnership, not a dictatorship. There are going to be limits. As for being bi, again... what are the circumstances? This doesn't seem to be a universal problem. Lots of people are bi. We are largely having a good time.
The idea that a post must be projection and not recognition of a societal problem is wrong, worse, it's exactly this kind of rhetoric which radicalizes young men and pushes them towards anti-feminism. The hollier-than-thou "everyone who sees problems in the world has internal problems" belief. It's the "hurt people hurt people" shit that makes blue-hairs say "who hurt you" to their adversaries. You don't know me. Don't act like you do.
I'm not complaining about some interpersonal issues, I'm complaining at how society treats men who purchase sex toys writ large. You trying to deny this is happening is misandry and you need to check your privilege stat before you commit a mortal sin against social justice.
I deny that it's a problem. Young men have invented some sense of how women should treat them, and women seem to disagree. The logical conclusion is that their theory is wrong, but this is the last place that demographic seems to want to go. Ban women from having jobs! Ban women's healthcare! This, it turns out, doesn't make us like men more.
Misandry is a bullshit concept created by the manosphere. The Wikipedia article literally says as much. Women are not systematically oppressing men. Go find any conspiracy theory about who is running the world. None of them are ever women. (George Soros, Elon Musk, etc. etc.) I have lived as both genders and I have to tell you, you do not get much benefit of the doubt as a woman. Look at how you're talking to me now! Do you talk to men like that?
I'm willing to concede your point that society is homophobic. Everyone is awash in propaganda that the only valid relationship is one between a man and a woman, and it hurts if that's not what you feel and it's what other people expect you to feel. People are largely under-educated and make no effort to look beyond the propaganda, keeping themselves in the closet for decades over this sort of thing (hi!). I am guessing from your use of the term "blue-hairs" that you don't identify as "queer" but it's something you should probably try on for size. I bet that in a more queer-friendly community, being bi doesn't give many people "the ick". But among cishet folks? I can definitely see that.
The fact that it verifies by ID scan is also not safe at all for a million different reasons.
A better way would have been to charge a small subscription fee - like $2/month or something. The fee filters out 99% of the trolls out there (who wants to pay to troll) and also gives the app/website admins access to billing info - name, mailing address, phone number, etc - without the need for a full ID scan. So the tiny amount of trolls that do pay to troll would have to enter accurate deanonymizing payment information to even get on the system in the first place.
And it can be made so only admins know peoples' true identities. For the user facing parts, pseudonyms and usernames are still very possible - again so long as everyone understands up front that such a platform would ultimately not be anonymous on the back end.
But oh no, that won't hypergrow the company and dominate the internet! Think of all the people in India and China you're missing out on! /sarcasm
I think you underestimate the willingness of people to pay to troll, it may filter out people but an app that was (in theory) meant to be secure shouldn't think of a problem as filtering rather than securing. Admins knowing peoples' identities simply moves the weakest link in the chain to the admins. I think an app like this was doomed from the start and 4chan simply pulled the plug on an already leaking bathtub.
I've thought about buying throwaway phone numbers just to troll linkedin. I'd be surprised if people weren't finding ways to get accounts on apps like this for trolling.
The only reason I haven't is because it feels like LinkedIn may have already jumped the shark and I wouldn't really get the value for my money.
The issue is they decided to roll their own extremely questionable service and insecurely store sensitive images in a public bucket
Multiple SAAS vendors provide ID verification for ~$2/each. They should have eaten
that fee when it was small and then found a way pass it onto the users later
no, but it is _tremendously_ more difficult than email or even ID scans (unless you're doing actual verification, which is both more expensive and complicated than just charging a nominal fee or even just attaching a Card object to a stripe customer). Just getting to stand on top of an extremely robust existing system (payments) gets you so much adjacent help in keeping bad actors out, or at least getting it down to a human-team manageable level. It can be the difference between a viable business and not.
The first part is its goal: identity is secondary, the main purpose is money. It means a customer can put a fake name and address as long as the money part is considered OK. Most PSPs won't check the cardholder name (it can be used for fuzzy scoring, but exact match is a fool's errand). Address is usually only required for physical goods and won't be checked otherwise. And 3DSecure will shift the blame enough that the PSP won't need to care that much about the details.
The second part is the whole mess that comes with payments. You'll become a card testing pot in no time, and you'll be dealing with all the fuss just to check identities, you'll soon be rising the token payment to a significant amount to cover the costs, and before you realize it half your business has shifted into payment handling.
> you act like it's impossible to get payment credentials that have nothing to do with the user
This is incorrect. The parent acts like it isn't trivial to obtain payment methods that aren't linked to the payer. It seems like a reasonable possibility.
For whom? For people willing to be an asshole on the internet? For people willing to stalk other people online? This sounds exactly like the group of people that would look for ways of paying for something in ways not linked to them, even if that means "borrowing" someone else's identity
Imagine flipping the genders and writing this comment in another context: "Women will go to great lengths to try and manipulate men. $2/month just gets you less crazy bitches", and imagine the outcry and downvotes. However it's totally normal and acceptable to bunch all men into a singular group and demean 50% of the population.
Your example isn't properly gender flipped. That would be "Women will go to great lengths to take revenge on their exes. $2/month just gets you less broke crazies."
While the above statement would benefit from adding the word "Some" to the start, I'm not sure it would generate much outcry.
Women aren't evaluated on their income like men are, they are evaluated on their looks. An equivalent app would be something that lets men share if women are less attractive than their pictures.
You’re worrying about the wrong thing here. The fact that so many men do these kind of creepy behaviours, and that men who do them are largely indistinguishable from men you meet every day, means that from women’s perspective “men do creepy things, I need to be careful” is an entirely reasonable prior.
Thinking every man is a predator is a great way to mostly meet male predators and wind up alone.
On app dates, it's extremely obvious when the person you're sitting down with has the "every man is a predator" attitude. Being treated like that isn't fun. Then a lot of people wonder why all their dates fail or go nowhere or why they can't move outside the app.
It is always interesting to see which prior probabilities are seen as acceptable for use and which are not. Humans have a very limited amount of time, and coupled with risk of physical danger, it should be expected for prior probabilities to be used. I would even go so far as to say necessary for long term survival.
In this case, given the long, well established history of the subjugation of women by men, I would say they are well within their rights to be "careful".
—- About 41% of women and 26% of men experienced contact sexual violence, physical violence, or stalking by an intimate partner during their lifetime and reported a related impact.
—- Over 61 million women and 53 million men have experienced psychological aggression by an intimate partner in their lifetime.
From memory I think those numbers for men include those in same sex relationships.
Also worth noting that men are much more likely to be physically or psychologically attacked by other men than they are by women.
I’m not minimising the idea that women can
Be violent, but we need to be careful to have in proportion. If you look at the most serious categories of harm, or only murder, the differences really are very stark.
Not at all downplaying the seriousness of emotional and psychological abuse, but these are very different things. Which is the main reason that the concept of this app doesn't bother me much. The immediate physical safety risks of dating as a woman are significantly greater than for men.
Sure, but it's about a factor of two -- the difference between the sun at noon and 5pm, not the difference between night and day.
Broken bones heal, but psychological wounds can last a lifetime -- and cut that lifetime short either through self-harm or the impact on chronic diseases. Sexual assault is so problematic because it has a very long term psychological impact on people.
Would you pursue that line of justification if the issue were ethnicity, nationality, sexual orientation, and/or gender expression? I'm not saying you should or shouldn't, and there are sound arguments for and against equating those things, but it seems like it merits consideration before one comments, not after.
Because we live in black crime culture and blacks do violently attack whites on much greater scale than the other way around. You don’t have to be even necessarily evil for that, honestly just some normalised behaviour in some black people can be enough to become a criminal for white people.
But you are just explaining why you are bigoted, bigotry which, in turn, you imply explains why you don't think it's wrong to be sexist. Sexist enough to disregard the importance of publicly sharing people's information.
I don't think you will find too many men being angry at your example comment just like no women will be pissed about what OP said about men. Don't be fragile.
Hey now! They use ID verification bub - how are you gonna fake that? It’s not like there are just public buckets of legitimate ID photos taken by real women for you to hoover up. Check mate.
The difference is, on these platforms you're rating legal entities. On Tea, you're rating, or rather sharing personal information about, an individual. Where I come from, sharing personal data of someone without their consent is not allowed.
Also on those platforms you can see if people are trash talking you even if you don’t have a procedure to face your accuser.
Even the open platforms creep me out. I don’t like seeing unverified accounts of crime in Nextdoor, I think if you see some crime you go to the police. I had a series of in person interactions with a woman which seemed creepy in retrospect, her Nextdoor was full of creepy stuff including screenshots of creepy online interactions. At least this gives everyone clear evidence they should keep away.
Unless they are intimate images (in which case revenge porn laws are likely to apply), copyrightable images for which someone other than the poster is the creator posted without the copyright holder’s permission (in which case copyright applies), or being used for commercial promotion or to suggest endorsement (in which case, depending on which states law applies, state law right of personality/publicity, especially if the subject is a celebrity, might apply), that's generally legal in the US.
Cool, I'm sure Tea is only available to report things about United States citiz... nevermind.
It runs afoul of about a dozen european rights to privacy, imagery and consent laws. And that's just by posting pictures ! Libel and slander are a bunch of others, right to a response is also another... the list is long. It is, once again, yet another dudebro trying to skirt legality.
> It runs afoul of about a dozen european rights to privacy, imagery and consent laws
The EU is welcome to try to enforce its local laws on the US operations of a US business open only to US users, but I don’t think its going to have much success.
That boat already sailed and it already happened. "US only operations" does not matter (which is already bullshit, as Tea does not verify that users are US ones, they merely disabled downloading in the play/app store): posting pictures of European citizens runs afoul of European laws. Sure, they can't come and arrest you on US soil. Just don't travel too much.
While the GDPR has extraterritoriality, you are over-reaching here.
Tea can collect and use photos of EU citizens, if it collected them in the USA, with (all other things being equal) no fear of GDPR violations.
So, yes Facebook can't collect photos of EU citizens, then process and do "stuff" with them in the USA, without violating GDPR, because that'd be the easiest out ever for multinational tech companies.
It is the location of the subject of the personal data collection that matters, not their citizenship.
Facebook can't do it because Facebook has a legal presence in Europe and does business with European advertisers and financial companies. If a business doesn't have, and doesn't want, that presence it can ignore GDPR.
No. Tea can have no legal presence in the EU, but if it collects data from people in the EU at the time of collection, then it is caught be GDPR. It would be offering services to people in the EU in this case, and so has to deal with their laws, including privacy and consumer protections.
Steam tried this stuff on in Australia too, saying it had no presence there, but still sold games to Australians. In particular, they didn't want to honour Australia's consumer rights laws regarding refunds. They fought hard in the courts and lost, and it improved steam for almost everyone.
Big tech try on these jurisdiction arguments all the time, but they've repeatedly failed where you are selling goods to, or providing services to, people in those jurisdictions. The US does the same thing. If you sell or provide services to someone in XX state, you need to abide by the consumer laws (and maybe privacy if it is a state like CA) of that state.
This is one of the reasons paypal and Escrow.com have had a competitive advantage. It is hard getting money transmission / escrow licenses in all 50 states like they do. There are many such examples.
Unrestricted by foreign law, yes. Would you be in favor of having US law enforced against you? It bewilders me why anyone would want more of this nonsense in the world instead of less.
The document you linked is interesting but I'm skeptical that you actually read it. It effectively says that in practice there's no hope of enforcing actions against entities that are purely in the US unless their behavior has run afoul of state or federal policy.
It does note that if concrete damages are recognized by the court that there is a decent chance US courts will cooperate to enforce the judgment. But the vast majority of GDPR enforcement is punitive as opposed to compensatory so it's not particularly relevant.
I'm also not clear why you think traveling would matter. DPA penalties are administrative in nature, not criminal. They are also likely to be levied against corporations as opposed to individuals. My guess is that the extremely unlikely worst case is your entry or visa application getting denied.
US law is _already_ enforced upon me. Banks regularly ask if you are a US citizen, or subject to the IRS in any way. The US affirms at every step the extraterritoriality of its harmful laws and attempts to use their pathetic excuse of "free speech" to defend multimillion dollar companies evading taxes in my country while damaging democracy. The US imposes its definition of copyright to the world, destroying access to culture and knowledge to billions.
Needless to say, I am very happy about making the US eat shit.
This is not true. Like, (almost) at all. (There are a few tiny exceptions, for instance, if an EU national commits child sexual abuse overseas, they can be prosecuted for it in the EU)
Two Germans shooting each other in Australia break Australian law, but not German law.
No, that isn't true. To the contrary actually, the GDPR applies to anyone on European soil, even US citizens. When you're on American soil, you fall under American legislation.
Ah yes, the notorious extraterritorial "right to be forgotten". Whereby the EU military dispatches its special forces to smash up computers in foreign data centers.
That's not really analogous to revenge porn laws (where the “revenege" part is both non-literal—the actual condition is lack of consent—and refers to a special circumstance that makes what is normally legal, illegal, not an enhanced penalty for existing offense.)
But if your proposed concept of “revenge libel” laws are just, as you say an added penalty for a subset of existing libel offenses, then while they might add more severe sanctions, they don't change the scope of what is prohibited, so they wouldn't change the calculus on whether anything is illegal.
So totally free, unless you criticise the empero… err, Trump or the government, of course. Or if you're against Israeli settlements. Or in favour of humane treatment of the People of Palestine. Or have information on the customers of Jeffrey Epstein. Or…
You can say all those things. Will some people think you're an idiot and refuse to do business with you? Sure. But you're not going to be arrested for things you say in the US unless you're making threats.
Let me a bit more precise. I'm not claiming that the US actually always follows its own standards, or that there aren't authoritarian oversteps of power -- there are.
I'm just saying that the American definition of freedom of speech (whether the authorities follow it in practice or not) is unusually expansive. Edge cases like hate speech against particular ethnic groups, public insults, open support for terrorist organizations, etc. are much more likely to be legally protected in the US than in other countries, even including other liberal democracies.
Well I'm not American but I feel like all I have read for the last 8 months has been American organisations and American people criticising Trump, the US government and Israel. I am not aware of penalties for these orgs or people, do you have examples?
lol no it doesn't. american freedom is a bit of a joke but it's par for the course in the USA to make shit up and then defend it.
The USA doesn't even rank in the top 15 on the human freedom index. Most freedom indices don't even put the USA in the top 20. A few don't even put the USA in the top 30.
But sharing *facts* about other people is potentially defamatory speech (in the American context). There's a not-at-all small nuance here: when you make concrete allegations about your personal experiences, you're not sharing an opinion—not sharing your subjective reaction to publicly-known information—rather you're introducing novel facts, provable objective facts, into the discussion—your version of those facts. And that comes with genuine legal risks.
A remarkable fact that's stayed with me: Ken White (@popehat) once said that in his defamation law practice, his largest category of consultations was with clients who'd said negative things about a past romantic partner, who then threatened to sue. I believe his point was those negative things were true most of the time, but difficult to prove, or defend.
I thought, as a practical matter, it's on the person alleging slander or libel to prove falsehood?
I think sometimes folks don't properly threat model what can be done if someone chooses to think about what the consequences for breaking a rule are and letting that guide their actions, rather than striving to avoid breaking them out of some kind of moral principle.
Hypothetically, if I said "firefax murdered an underage prostitute and then sexually violated the underage prostitute's corpse in 2018 and was never caught, I witnessed it happen and tried to report it but the police refused to even open an investigation, firefax is a dangerous predator and should not be trusted", and you lost your job because of that, should you be the one with the burden to prove that never happened?
We are talking about what is the law in a specific country, not what “should” be the law. Also, the bizarrely graphic description is out of place here.
It's a visceral thought experiment, intended to instill a sense of bewilderment at what being falsely accused actually feels like to someone who seems to offer a normative assertion that privileges bad-faith accusers, without actually causing any of the harm of a real false accusation. That is topically relevant and experientially informative while being restrained enough to not be actually harmful.
It’s complicated in the US. The rules of thumb as I understand them are:
1) The truth is an absolute defense against libel claims, but it is a defense, so you must prove the truth of your claims.
2) Statements of opinion (or that a “reasonable person” would understand to be opinion) are with few exceptions protected. “Firefax is a rapist” is likely to not be considered a statement of opinion. “Firefax is a creepy asshole” likely is. “Firefax is a sexual predator” is probably going to be in a grey area and context and damages will be relevant.
3) The more “public” of a person you are, the harder it is to win a libel case, even the statements were false. For example, let’s say it turns out both that there is some “Epstein List” describing clients and their activities, and also that it turns out Trump doesn’t appear anywhere in that list. Trump is such a public figure (both as a celebrity and as the POTUS) that he would be extremely unlikely to win any libel cases against the internet randos confidently asserting he’s on the list even though that statement would have been a statement of fact, and would have been false.
4) A key part of the “opinion” grey area is whether you imply knowledge of heretofore unknown facts, or your relying on publicly available data. Internet randos might not lose a case, but someone like Elon Musk might if they said something like “I’ve seen the case files, Trump is definitely on that list and has done some sick things”. This is because Musk could reasonably be believed to have had privileged access to the information in question and have non-public facts they are basing their statements on. Internet randos on the other hand are largely going to be considered making their statements on the back of publicly known facts (e.g. photos, business connections, public actions and statements) and general “vibes”
> But sharing facts about other people is potentially defamatory speech
Yes, and? The service is protected in the US by Section 230, and Tea doesn't operate anywhere else currently. Individual users who use it defame are, in principal, subject to defamation liability, but in the US (and, again, that’s the only jurisdiction currently relevant), the burden to proving that the description was both false and at least negligently made (as well as the other elements of the tort) falls on the plaintiff (it is often said that “truth is an absolute defense”, but that’s misleading—falsity and fault are both elements of the prima facie case the plaintiff must establish.)
Sure, in a jurisdiction with strict liability for libel and where truth is actually a defense, and/or where the platform itself, being a deep pockets target, was exposed, Tea would be a more precarious business. But that’s not where it operates.
Devil's advocate, but how is saying someone is an unreliable romantic partner going to financially hurt someone? Maybe the reason I haven't had success in the policy arena is because I've been too kind, given recent events :-)
I'm not sure, it depends case to case and what the court thinks. I think, generally, if you can prove it directly caused you to lose lots of money then you can make an argument.
Do you think a women's dating safety app is mainly about women lying and intending to hurt men, because it's rare for men to stalk or sexually assault women?
A few days ago a video leaked of a woman riding in a Mexican taxi, who was demanding the driver went faster. He refused because it'd be dangerous, and she immediately started threatening to report him as a harasser to the police. She even said he had to speed up or else the police would be waiting for him when they got there. She didn't realize her whole conversation was recorded on camera.
A lot of men have had experiences like this one. Either directly or they know someone it happened to. Yeah #NotAllWomen but way too many will exploit the feminist #BelieveAllWomen culture to gain even trivial benefits. An app devoted to letting women anonymous gossip and engage in reputation warfare without fear of consequence, or even fear that the man might reply in self defense, is going to get flooded with women like the taxi passenger.
"A lot of men" is doing a lot of heavy lifting here.
Go read some statistics on the number of women harassed, abused, raped, and killed every day—every single day—because they are women.
Go ask your mother, your sister, your wife, your female best friend, when they had their last abusive encounter.
Go ask your friends of both genders what the worst things are that could happen to them when walking home at night, and compare the responses.
Go read some historic accounts of how women were treated for… pretty much all of history.
Go look up news articles of what can happen to women when riding a taxi. Spoiler: it’s not just a threat.
Yes, there are some abusive women out there. Yes, it’s fucked up when that happens to you. But trying to insinuate the levels of violence against men would be even remotely comparable is just plain awful.
By the time a man has hit his 40’s, it is exceptionally uncommon he hasn’t seen someone hit with a false rape claim - or had one himself - by a vindictive ex. Or has been threatened with (or directly attacked) with physical violence.
By people going on the same sort of rants like you just did.
Some People are terrible, especially when they think they can act without consequences.
Does that excuse men doing bad things too? No.
But it sure does (or should!) make anyone with a brain question hyperbolic claims of abuse or violence without actual evidence.
The problem is that you're equating the wide range of violence against women with a specific kind of violence against men by calling both "bad things", insinuating those are even remotely comparable. They are not. 90% of rape victims are female. In the US alone, every 68 seconds, a woman is sexually assaulted.
After the big war, some Germans were quick to point out that their people had suffered when they were displaced from the land they occupied in Poland, for example, and that "both sides had suffered". I assume you're also incapable of understanding why the victims of the Nazi regime were completely aghast by that?
> But it sure does (or should!) make anyone with a brain question hyperbolic claims of abuse or violence without actual evidence.
What do you suggest to do instead? Sexual violence is often a crime with only the perpetrator(s) and the victim as witnesses. In most cases, rape doesn't leave persistent traces. Rape victims tend to be in shock, however, and often need time to process what happened. Your suggestion seems to be that we should question these claims?
Judging these cases correctly is incredibly complicated, and claims of wide swaths of men falling prey to abusive women don't really help anyone affected.
There is a reason ‘he said, she said’ is widely known as the shittiest type of situation, eh?
Yes, we should question those claims, and any others. Or everyone who wants to be shitty will do it via that route. It’s basic shitty human behavior.
That it screws actual victims is why people gaming the system should be punished.
But not challenging these claims just makes more victims too. And eventually people will just tune out accusations, because the shittiness has gotten too pervasive. And then the predators/shitty humans will get be doing more actual rape eh? Which is terrible.
This is why it’s also prudent to be very careful who anyone is alone with, favor video recording of public spaces, etc. as well. Because the best way to avoid a situation is to make it as difficult as possible for the situation to occur, and minimize the chances of any ambiguity. Which is also shitty for everyone.
Personally, I also don’t trust the stats because I’ve seen many (5+) women retcon clearly consensual behavior (that they were even bragging about before!) into ‘he raped me’ when someone tried to shame them for it later, or there was some leverage they could get out of it. I had one who literally admitted to me when I investigated that she was doing it to punish the guy for refusing to date her later. Another was fine until she went home and her mom gave her crap about her dating behavior, and then all the sudden it was rape. Until we started to interview her for her story, and then she admitted it was consensual.
I very much believe actual rapes and SA’s occur. I personally have literally never seen an accusation for rape or SA that stood up to even the lightest scrutiny, within the environments I’ve been responsible for. And not because I was trying to avoid them!
The joys of being a manager of mixed sex groups eh?
If we could figure out the actual truth of these situations, then we could punish actual offenders and not constantly be in this BS situation.
I do. Not as an indictment of women but an indictment of social apps. Apps like this are way too hard to moderate, manage and verify. They quickly get swarmed by bad actors and misused. Again, not because women don't have genuine safety concerns in the dating world but because apps are not a viable way to manage those concerns.
Some social problems just don't have technological solutions.
You know the answer to that is zero. There is no viable system a company, let alone a small unfunded startup, could use to verify the identity of the reporters let alone guarantee the trustworthiness of the account.
Those ten reports could be made by one person. That one person might not even know the person they're accusing. That one person might be a man. That one person might be a bot.
You'd have to ignore the last three decades of online identity, trolling and social media pitfalls to not recognize that.
And please don't compare reviewing a can opener on Amazon to accusing someone anonymously of a heinous crime on an app built by one person.
But I'm not sure I'm going to convince you with words so I'll suggest this:
Go and build this app.
Build it, see what happens. Nobody else has been able to crack this but maybe you can.
> Do you think a women's dating safety app is mainly about women lying
That's not what it is intended for, but many people after relationships end can be extremely emotional and sometimes very spiteful. It's not uncommon for people to embellish or lie about the truth to make themselves look better and the other person look shitty. Especially if you're the one being dumped, you may be even more likely to engage in petty behaviour.
I personally have experienced an ex making up a sexual assault story. This kind of app didn't exist then, but she even went as far as reporting me to the police. Luckily the police investigated and could easily discern it was a lie. Going to the police is obviously a much higher burden than using an app, and yet many females still go make false SA claims there. Do you really think it wouldn't be a common problem for people to do the same in an app at a much higher rate?
People often believe things like SA claims without any evidence and will often even attack people trying to defend the person or insist on some kind of proof. It means that someone making up bull crap on these apps is going to be treated like it is true, yet the rates of lies would likely be pretty high.
People can just be so crazy when it comes to relationships/love. Especially when it comes to people in their teens or early 20's, the brain isn't fully developed and dealing with these emotions is even more challenging and leads to even more rash decision making.
We grant a tremendous amount of leeway and power to accusations made by women against men in society today. There are always honest people using things for their intended purpose. Though they are also dishonest people using things for their own ulterior motives.
A well-designed system will maximize utility for the former, and minimize utility for the latter. An app where women can leave what are practically anonymous reviews for men is not such a system.
I'm sorry and I'll be voted down for this, but I do think that it will attract plenty of fibbing and deliberate or not-so-deliberate stretching of the truth. Anyone who is rejected tends to be a bit angry about it. In this case, women who are ghosted can say whatever they want.
This isn't all of the people, but in my experience in life it's more than enough to make this app impossible to filter.
That doesn't apply when you publish information for broad consumption. Then it becomes libel. People need to realize that posting on a site where you can reasonably expect that your words may be consumed by the masses makes you a publisher. That comes with responsibilities and is not protected the same way as an individual's personal speech.
So all I need to do to mark another guy (who might be, for example, competing for a job I want, or a certain woman's attention) as a rapist on a platform that's used by people in the location this guy lives in in the US is a (fake) female driver's license, a photo of the guy in question, and a name?
coolcoolcool. I'm sure that neverever gets abused horrifically.
It's not defamation if it's true. Why do you think women warning other women about rapey and stalker men are mostly lies? Even if it's only 5% of men, wouldn't the discussion focus on that dangerous 5% over persecuting the innocent 95%, as a matter of self-preservation?
An irony in this conversation is how normalized it is for women to be concerned about men as a demographic when it's only a small minority that inflict harm. While it's controversial for men to be concerned about women as a demographic when it's only a small minority that inflict harm.
I still maintain my pet theory that this is a downstream effect of the normalization of paranoia around pedophiles that began hitting the mainstream in the '80s. The modern world is exceptionally safe, yet to the average person, it feels exceptionally dangerous.
...While I've got the hood up, I'll continue soapboxing.
I've started seeing rare instances such as a young woman walking around a corner and there is a man rounding the same corner, surprising her by mistake, and the woman starts crying or breathing in a panicked way, unable to regulate herself for several minutes. It's not always walking around the corner at the same time, but there's a common pattern of being surprised by a man just going about his day and experiencing a severe fear response to that interaction.
When I look at a lot of cultural related issues today, beyond just gender, I see many signs of pervasive psychological issues. I don't know what the solution is, but I'm very confident that the root cause is more complicated than something you can describe in a single sentence.
Maybe it's different now, I have no clue, but I'm in my 40's now and don't make a habit of hanging out with 20 year olds.
But I was friends with my wife's friends before we got married, and in a sample size of ~20 women my age, every single one of them has experienced inappropriate and unwanted touching in social settings. And a large number of them were victims of outright rape.
In comparison, I have many male friends and of them, I only know one who has been wrongly accused of sexual assault (the lady openly talked about doing it to help with a promotion...)
So even if both sides may have a few bad apples, one side is a much more prevalent problem when it comes to the number of victims.
> An irony in this conversation is how normalized it is for women to be concerned about men as a demographic when it's only a small minority that inflict harm.
The same hypothetical 5% can inflict harm to multiple women, that's why multiple women and girls complained about Epstein and Trump.
What was leaked was women's personal data, like driver's licenses. What they shared with each other was their experiences with men who sexually assaulted them or stalked them and their names, not the men's personal data.
Men's driver licenses were not distributed online. Only women's driver licenses were distributed online.
I'm not familiar with this app, but surely those accusations of sexual assault are only useful to other users of the men are sufficiently well identified?
The article says that what gets shared with the app is a picture of the man, and it's not just "those who sexually assaulted them or stalked them" but anyone they want feedback about.
I assume the app then runs facial recognition.
This may be legal in the US, but not under GDPR. Pictures of faces are biometric data (explicitly listed as such), which falls under additional restrictions beyond personally identifiable information.
A drivers license with the picture blacked out would be less sensitive than the picture itself!
There are soo many examples from the US showing why GDPR is a good thing: Clearview AI (biometric mass surveillance, essentially "search the internet by face"), car manufacturers collecting and selling location data, phone companies collecting and selling location data, ISPs collecting and selling browsing behavior, companies running mass surveillance on license plates and selling the data to law enforcement and really anyone who pays, some DNA sequencing related abuses that I don't remember the details of, all the data collected by the ad "ecosystem" (note that this still happens in GDPR-land because enforcement is lacking), this, ...
In this future that you want me to imagine, do you imagine, that I'm imagining that I am poor or I am rich? Because oh man, I didn't have much luck at the lottery or at blackjack or craps or startups or crypto, but I'm sure, this time, AI is gonna help me strike it rich!
Yes, as far as I understand, you upload pictures of men, either taken in the wild or from dating sites (Tinder) against their will. I am pretty sure that this would be illegal in some jurisdictions. Especially EU.
Every couple years someone tries this and it immediately turns into a cesspool because no matter the good intentions of the makers, it attracts the worst kind of person as active users.
It gets shut down, everyone forgets, then someone eventually has a brilliant idea...
It come from a place of sincerity but defenders imagine everyone would use it for the same reasons they would: Warning people of genuine threats in the dating world. They would never use it for gossip, or revenge, or creative writing, etc. so they don't imagine others would.
But at scale, if generously only 0.1% of women in America are bad actors that would weaponize this app, that's over 150k people (not to mention men slipping past security). And the thing about bad actors is that one bad actor can have an outsized effect.
These kinds of apps are already in existence across many cities in the world in the form of informal, invite-only WhatsApp and Telegram groups.
The problem is the demand is there for such groups and I see posts that range from, “this guy tried to get me to get in his car”, or “man exposed himself to me”, to “man has twice approached children at my child’s school” or “I was drugged and raped after meeting with X on Y dating app”.
Lots of sexual attackers are known to multiple women.
Fact is that in lots of countries rape kits don’t get processed, it’s hard to secure a conviction, many serial sex offenders walk free and many women don’t want to go through a reliving of their trauma in court.
As a result these kinds of groups are very useful, not just for women who are actively dating, but for women who are simply existing in day-to-day public life. We have a president and a supreme court judge who both have been accused of serious sex offenses and nothing happened.
Is there a chance that some man who has done nothing wrong, gets accused by a woman in these groups? Yes of course there is a chance that could happen, but many would prefer to not take the risk of dating someone that has been accused of being a sex offender and the vast majority of posts with confirmation by multiple women confirm that bias.
These groups help keep women safer than without them. There’s a good reason why many women just don’t date at all any more. Covid lockdowns reminded them that they don’t really need it and it’s more hassle than it’s worth.
Sadly the vast majority of men are fine (not all men), but not enough call out the bad and dangerous behavior of a minority of their friends and peers. Until that happens women will be drawn to these apps and groups to try to be safer and not be a part of a sex crime statistic.
"invite-only" is key because it requires a trust relationship, if not directly then through minimal degrees of separation. While not perfect they can basically work while apps for the general population cannot because there is no trust between the users.
Indeed. This trust is a critical point. The invitation mechanism is a web of trust. Not infallible but better than these apps that try to centralize that through identification.
> Is there a chance that some man who has done nothing wrong, gets accused by a woman in these groups? Yes of course there is a chance that could happen, but many would prefer to not take the risk of dating someone that has been accused of being a sex offender and the vast majority of posts with confirmation by multiple women confirm that bias.
The concern of false accusation appears to be... brushed aside. Are you a man? How would you feel if you were falsely accused? Knowing that this could snowball into being doxxed, having your employer informed etc. Innocent men have been jailed for this.
Based on some of the things I've seen in my professional and personal circles, I'd say there's much more than a chance, and the level of potential distortion is probably much greater, with more consequences, than some are acknowledging.
There needs to be a startup accelerator or VC that solely focuses on recycled ideas. We could have an app that gathers strangers for dinners, one for reviewing people, and so on. Since all of these gained traction at some point, the idea would be you get 1-2 quick puffs of these discarded cigarette butts before selling or shutting down. Just vibe code it, go viral, collect some subscriber fees, then close due to whatever reason.
This looks like a slam book. Or that’s what girls called it when I was in high school. Basically just a place where you write mean things about people you don’t like. And those people don’t get to see it.
It's only not a thing because, in the U.S., it's redundant. In other jurisdictions, it might be a thing, because there are places where a claim can be both defamatory and true.
This is more a question of English than law. Slanderous statements are false by definition.
There are countries where "false defamation" could be a term of art. Japan, for instance, where spreading rumors about someone that hurt their reputation is actionable even if those rumors are true. If your boss is having an affair, for instance, and you tell all your coworkers, he can successfully sue you.
A gray area in my eyes. As a father, I think it's good that my daughter uses the app.
You only need to look at the statistics to see how many women are killed by their male partners every year.
It's harmful to spread this kind of fear. Statistically it's less than 0.05% of women die because they are killed by their partner. This puts a stigma on men in general as some sort of dangerous savages.
As a man, I find it absurd and even dangerous to not attach some stigma to men. That you feel the need to invoke "dangerous savages" is maybe your own prerogative, but by any sober and fact-based analysis it is indisputable that women are justified in acting cautiously when dealing with strange men.
Most violence is perpetrated by men. If you're only response to that hard, cold fact is some stat about infanticide, maybe you're not honestly grappling with the issue.
And yet domestic violence is equally done by men and women, except that most men don't report the abuse because of people like you who act like it doesn't happen. It's disappointing.
You bring up fact based analyses. Let's see what they have to say.
> Over two hundred studies found that men and women perpetrate intimate partner violence at roughly equivalent rates, depending on where the samples are drawn from, and what level of violence is identified. (Dutton and Nicholls, 2005).
I'm justified in acting cautiously when dealing with strange pit bulls, too. That isn't the same as saying pit bulls deserve to be stigmatized. Or I don't think it is.
I think the problem is not the statement, but the conclusion.
Do we have more physical violence from men towards women than the opposite? I think I saw that the reality is yes. Does it mean that men are biologically coded to be violent, or is it a question of education and culture?
If you conclude the second one, it is not "sexist" (on the contrary, it may even be that the culture that creates the problem is itself rooted in sexism and that acknowledging some reality about its existence may help changing this culture), and does not imply prejudice against men, just acknowledging that we need to be careful in case of bad apples.
It still means that talking about this requires to be very careful.
To react on your example, I think it is a good think to notice if some population have a bigger problem at this subject than others, and we can then identify more easily the places where this problem forms and target these places. But people who concludes "look at violence divided by race, so I can generalise and be prejudicial to everyone in some race and not other" are idiots.
The statistics is a bit more complex and nuanced than giving straight answers. Studies looking at any form of violence in partner relationships shows both women and men having equal amount. When looking at physical violence, especially those that lead to people being charged with a crime, men are over-represented in heterosexual relationships.
However, homosexual relationships has equal rate of partner violence as heterosexual ones. A bisexual woman that has a relationship with an other woman will double her rate of physical violence compare to relationship with a man (statically). A man who has a relationship with an other man will half his rate of violence. This makes no sense at all (unless we believe that sexual orientation is an factor for violent behavior), unless we add a additional factor of sexual dimorphism. Men are on average larger and more muscular, and there seems to be a correlation between being the larger/stronger and using physical strength/fists during a fight. The smaller person is in return more likely to use tools or other means of violence. Statistically, fist also has a higher probability to do damage than improvised weapons, since people are more proficient in using their fists.
Does it mean men are biologically coded to be violent? No. Is it a question about education and culture. Maybe in some countries/cultures, and it wouldn't hurt to use the education system to teach people conflict resolution. Getting people who are physically larger to not exploit that fact during a heated fight is likely a hard problem to solve on a population level.
I think "any form of violence" is not a constructive direction. First, this ends up being very subjective: between 2 forms of psychological violence, which one is the most violent? Secondly, if indeed it is cultural, it implies that different sub-culture may have different ways of acting, so we can always play the subgroups to make it says whatever we want. But most importantly, it is not very relevant for our context: in the case of the first interactions during heterosexual dating, pretending that men risk as much as women seems a very unconvincing claim, for several reasons (even if under-represented it should be under-represented to an unrealistic level to reach an equal level, and it also does not fit with plenty of cultural tropes (I can find a video explaining explicitly that manly men need to dominate their female partner. I'm sure it exists, but the simple fact that I cannot easily find a video explaining explicitly that womenly women need to dominate their male partner shows it's not that of a trope. On the other hand, I can also easily find videos about "trad wife" that will explain that a womenly woman must be with a dominating man))
For the rest, I think we say the same thing: talking about the visible issues is not a problem in itself, but people instrumentalising these issues to be racist or sexist are the problem.
The technical term of "any form of violence" seems to be Partner Abuse, and the definition is: "violence refers to behaviour within an intimate relationship that causes physical, sexual or psychological harm, including acts of physical aggression, sexual coercion, psychological abuse and controlling behaviours."
The primary motives are to get back at a partner for emotionally hurting them, because of stress or jealousy, to express anger and other feelings that they could not put into words or communicate, and to get their partner’s attention.
The idea that women are unable of violent behavior, or immune to wanting to take revenge for being emotional hurt or stressed, seems utterly unlikely. Especially young adults who might lack the tools and experience to avoid falling into violent responses.
To quote a different finding: Eight studies directly compared men and women in the power/control motive and subjected their findings to statistical analyses. Three reported no significant gender differences and one had mixed findings. One paper found that women were more motivated to perpetrate violence as a result of power/control than were men, and three found that men were more motivated; however, gender differences were weak
Asking if "men risk as much as women" is a very different question however. If a woman throws a knife at a man, and a man hits a woman in the face, who carry the highest risk? Statically, the fist is going to do significant more damage on average than the knife, as throwing a knife (especially a non-throwing knife), hitting the target, and creating damage is fairly unlikely for a non-proficient attacker. If the attacks was recorded on camera/witnessed, one would be an attack with a deadly weapon with the intent to kill, and the other would be physical assault.
The point is that partner violence is a complex problem, which only simple aspect being that both women and men are humans.
If it's almost all about the size of the specific two people in a relationship, it's a terrible terrible idea to aggregate that by gender, leading to completely misplaced wariness and judgement.
Why would it be the size of the specific two people in a relationship?
It looks very clear to me that violent behavior in relationship (and more specifically, in the first few days of dating) is a question of education, not the result of one person being bigger. For example, every parents are stronger than their young children, but only some kind of parent are violent towards their children. If it's a question of education, reducing the problem of the size of the people is a terrible terrible idea: the problem will never go away because you don't understand the source and therefore don't act on the source to fix it.
It feels like some people here are framing the problem in "men vs women" framework, as if it is a competition and they don't want to accept that maybe men behavior is different from women behavior because the way they are raised in our society. I don't really see the point: I'm a man, and yet I don't take it personally. The same way I don't take it personally when someone says "don't accept candy from strangers": I'm a stranger for a lot of kids, and yet I understand why they should be prudent and I understand that, in situation where I have to interact with an unknown kid, I should do things differently (for example not giving them candy), not because I'm a danger for them, but because it is true that there is danger and that they cannot know if I'm a danger or not.
So many men take it uselessly and nonconstructively personally as soon as it is dating.
> Why would it be the size of the specific two people in a relationship?
That's the main argument of the grandparent post. If you're missing that then you're not really responding to what they said.
They went into significant detail so I feel like trying to reword it myself would be worse than suggesting you read the post again.
> If it's a question of education, reducing the problem of the size of the people is a terrible terrible idea: the problem will never go away because you don't understand the source and therefore don't act on the source to fix it.
Nah. Root cause analysis is entirely different from risk analysis. This is about risk analysis. If a woman dates a man that's smaller than her, who should be more worried about violence? That's not the time to worry about why and how to fix society.
> maybe men behavior is different from women behavior
Maybe it is! But then you need a really good explanation for the data in the above post. Or you need to say the data is wrong. But you can't just dismiss it as being defensive.
> That's the main argument of the grandparent post.
Exactly, and I've answered that saying I'm not convinced, so, I've asked you if you had further arguments. I've said at the time why it was not convincing, and I've built even more in my previous comment.
> If a woman dates a man that's smaller than her, who should be more worried about violence?
I still think it's the woman, because not every parent beat their children despite them being smaller, which proves that being bigger does not mean being violent. You need something more. In this case, I think it's a culture that implies that violent men are manly and successful, which is present in the manosphere. Because there is no such culture (I guess you can find anecdotical case, far from being as common as the manosphere) that implies that women beating men is somehow "womenly", I doubt it implies that tall women will beat men at the same rate.
> But then you need a really good explanation for the data in the above post.
All the data adds up, everything is pretty well predicted by this model. Not sure which data you think this model does not explain (unless you think that somehow this model implies 0%-100%, which is of course not the case). On the other hand, I doubt anyone has ever proven that being taller in the relationship is really a strong causal factor (and not just correlation, as the manosphere is also into going to the gym) (but happy to get links if you have some).
> Exactly, and I've answered that saying I'm not convinced, so, I've asked you if you had further arguments. I've said at the time why it was not convincing, and I've built even more in my previous comment.
You never made it clear that you understood the argument, because you went straight from "Not sure what is your point" to "Why would it be". That doesn't look like a request for more convincing, that looks like you never considered it.
> I still think it's the woman, because not every parent beat their children despite them being smaller, which proves that being bigger does not mean being violent.
What. Not every dating relationship involves violence either. We're talking about what's more likely here.
Also children and dates are different in so many ways that even ignoring that factor this doesn't disprove the argument at all.
> Not sure which data you think this model does not explain
If the root cause is culture encouraging men to be physically violent, why would the total amount of physical violence be the same in gay relationships, especially lesbian ones?
I'm simply trying to have an enjoyable conversation where we all learn and understand each other. I was just saying "I'm not convinced by this, but maybe I did not understood" to avoid assuming incorrectly, and to invite non-confrontationally to clarify if I'm wrong and provide more arguments.
I'm not saying that the children example means that "every bigger persons will be violent towards a smaller person", I'm trying to explain that the children example means that "violence is not the result of being bigger, it's the result of the individual propensity to be violent, which itself depends a lot of the individual 'world view'".
What I call here 'world view' is how the individual understand the world, their role in this world, what they can or cannot do, ... This is something built based on their parent education, but also their personal experience, what they absorb from the ambient culture and how they identify with different societal messages.
Such influence is taken as obvious in plenty of places: we don't question concepts like "different countries have different cultures and therefore people act differently", or "the education that this person has received had an impact in the way they act now", or ...
I find strange that, when it is a discussion that we can frame as "men vs women", these things that we immediately considered impactful in other situations are suddenly considered as totally non-impactful in this context.
Because of that, it feels unrealistic to pretend that women will obviously be as violent if they were stronger than men and that the only thing that stops them is them being smaller.
> If the root cause is culture encouraging men to be physically violent, why would the total amount of physical violence be the same in gay relationships, especially lesbian ones?
I've mentioned that (when I've said "if indeed it is cultural, it implies that different sub-culture may have different ways of acting"). The propensity of violence depends on the "world view", which itself depends on personal experience, what is the message the society send to the individual their role is, ...
In the case of lesbians:
1) I don't think we can easily say "it's the same". Some studies even say it's more, but then, how do you explain that with your model? But looking into it, it looks like the consensus is that it is a difficult study and that we don't have a good statistical significance: the consensus seems to be that concluding "it's the same" is not scientific right now, all we can say is "it may be the same, but it may also not be the same, we don't know yet".
2) The life experience, the social message they receive, the relationship dynamics, ... are quite different in lesbian couples and in heterosexual couples. And all of this affects the propensity to violence. I can understand that a group where the members grew up in a society that sends the message their sexual attraction is "wrong" or "deviant" does not have, for example, the same self-esteem than a group where it is not the case. It is not fair to pretend that lesbian couples have the same background and the same situation than heterosexual couples.
So, in the case of lesbians, the data you provide is not challenging my model: it can easily be that men may be more violent in heterosexual relationship because of sociocultural message (such as "getting angry is the manly way to deal with frustration") or sociocultural role (such as "men are the breadwinner and are focusing more on their career, so they have more pressure and snap differently than women"), while lesbians may be more violent because of their sociocultural message inside their own subculture (maybe? Maybe for example "in a lesbian couple, we expect to have a butch one and a dominated one") or their life experience (maybe? Maybe for example "low self-esteem of both the victim and the abuser leads to a relationship dynamic that facilitate violence").
I'm also interested to have more information about your view on the phenomenon like the manosphere. I don't think we have a "female manosphere" that promotes the same culture of violence towards the partner (I'm sure there are cases, but that is not at all the same order of magnitude in popularity and mainstreamness). Sure, the people who really fall for the manosphere rhetoric is a minority, but they are the extreme of a Gaussian curve that indicate that the mean value is not at the same place for men and for women. If it's the case, is it really realistic to just pretend it has no impact at all (and if it has no impact at all, why people who defend that it has no impact will also be worried about "the image of the men" when it comes to talking about violence done by men? Why would be one message harmless and the other dangerous?)
> I'm simply trying to have an enjoyable conversation where we all learn and understand each other. I was just saying "I'm not convinced by this, but maybe I did not understood" to avoid assuming incorrectly, and to invite non-confrontationally to clarify if I'm wrong and provide more arguments.
That's reasonable as a goal but I implore you to be clearer next time. You didn't address the evidence they gave so I couldn't tell if you understood at all or if you though other evidence was more compelling.
> I'm trying to explain that the children example means that "violence is not the result of being bigger, it's the result of the individual propensity to be violent, which itself depends a lot of the individual 'world view'".
I don't think that's good enough evidence for such a strong claim. Not at all enough to say the size factor is flat-out disproven by it.
And overall I do think world view is important, but I bet physical size is a significant factor too unless the evidence above is extra bunk.
> I find strange that, when it is a discussion that we can frame as "men vs women", these things that we immediately considered impactful in other situations are suddenly considered as totally non-impactful in this context.
I'm not saying totally non impactful but it's unclear what percentage.
> Because of that, it feels unrealistic to pretend that women will obviously be as violent if they were stronger than men and that the only thing that stops them is them being smaller.
The statistics given are not based on pretending.
> it looks like the consensus is that it is a difficult study and that we don't have a good statistical significance
That is a much better argument.
> while lesbians may be more violent because of their sociocultural message inside their own subculture (maybe? Maybe for example "in a lesbian couple, we expect to have a butch one and a dominated one") or their life experience (maybe? Maybe for example "low self-esteem of both the victim and the abuser leads to a relationship dynamic that facilitate violence").
Edited this line to make it clearer: Maybe but looking at that level of complication still makes it harder to evaluate man versus woman in any random relationship, especially those very individual life experience factors that can affect anyone.
> I'm also interested to have more information about your view on the phenomenon like the manosphere. [...] is it really realistic to just pretend it has no impact at all
I'm not sure how much it impacts violence in particular, shrug. But whatever effect it has is divided by the relative rarity of believers.
> If it's the case, is it really realistic to just pretend it has no impact at all (and if it has no impact at all, why people who defend that it has no impact will also be worried about "the image of the men" when it comes to talking about violence done by men? Why would be one message harmless and the other dangerous?)
Listen, I haven't heard this debate before, and I'm not taking part in it, but your comparison here isn't reasonable. Asking if one message increases violence and asking if the other message hurts someone's image are completely different things. If someone says no and yes respectively there's no hypocrisy.
It feels a bit like saying "there is a bug in software X, but there is also a bug in software Y, so let's not fix the bug in software X".
Of course, men also suffer from problems.
It even feels that it is usually also due to machismo or something similar.
Sometimes, it feels like the majority of men's problem is in fact self-inflicted by the manosphere. They both complain of suicide rate, army draft, violence against men, but they also promote a culture of not-showing-emotion-otherwise-you-are-not-manly, a-man-is-worthless-if-they-dont-succeed, army-is-manly-and-women-are-weak, a-man-should-show-dominence-and-other-men-are-a-threath, ...
People likes to see things in black or white, but the reality is more complicated, and there is no advantages that does not bring also some disadvantages.
Calling it "extremely idiosyncratic" is not indicative of reality:
> Black people are the most likely to experience domestic violence—either male-to-female or female-to-male—followed by Hispanic people and White people.2
Centers for Disease Control and Prevention. The national intimate partner and sexual violence survey: 2010-2012 state report.
> Asian people are the least likely to experience intimate partner violence.[1]
You misunderstood my comment and instead gave examples that further support the idea that race relations in America are unique and particular to our history and geography. That's why race statistics in the US are not well-suited for cross-cultural comparison, let alone for drawing gargantuan conclusions about inherent racial traits (as racists are often looking to do).
The risk of females being murdered by an intimate partner is five times higher than for males. And murder is just the very end of the spectrum.
And by definition, calling out men, is not racism.
Are there other groups that are 5x more likely to commit murder? Even if there are, IMO we shouldn't judge every member of that group for the actions of a small minority
It's better to think in terms of overall life damage and "quality of life years lost". I think it's very debatable which side loses more from getting involved in relationships.
Statistically that is a rather small number. But if we take the number of women in say, America, a web search says 334.9 million. 0.05% of that is 167,450. That is quite a lot of women being killed by their partner.
According to the UNODC[1], in 2023, the rate of all murders of women in the US was 0.00205%. (2.05 per 100,000) Partner violence appears to account for ~34% of violence against women[2] (but vs. 6% for men), so that would be 0.697 per 100k or ~0.0007%, or ~1190 women/yr in the US[3]. Assuming I've done the math right… the risk is more than two orders of magnitude smaller than what you came up with.
> Partner violence appears to account for ~34% of violence against women[2] (but vs. 6% for men)
And this is sort of the point of the comment higher up: when you cut the stat this way, it seems like men are wildly dangerous creeps. But it is a statistic comparing one group to another group. We need to instead look at the absolute rate of partner violence to decide if men are on the whole violent murders or so, and there, the overall risk is low.
> when you cut the stat this way, it seems like men are wildly dangerous creeps.
Not exactly. The statistics didn't specify the gender identity of the perpetuator, just the relationship to the victim and the gender identity of the victim.
I don't know were you have this numbers from, but in 2021 34% of women were killed by partner and 76% of women where killed by a known person (family, friends, colleges, partner) [1].
Your wording here is clumsy. You're saying that 34% of the adult female population was murdered by their partner. I'm assuming you meant female murder victims and not women in general?
I agree with you that in the context, your stats maybe make more sense. But if you're going to correct someone, you generally should recognize what they were trying to communicate in the first place.
I don't want to imply that someone tried to find the smallest possible number in order to deliberately misunderstand my comment, but we are still in the context of the dating app.
I keep seeing the defense for Tea as an app for women’s safety, which is of course a valid concern. Wouldn’t it make more sense for a service to exist, like some kind of enforcement service provided by the government, where others can report safety concerns and that service goes and does something about it legally?
If such a service exists and isn’t being too effective, shouldn’t that be worked on?
My guess is that there’s more to the reasons for why Tea is popular but the safety argument is largely being used to defend it
> Wouldn’t it make more sense for a service to exist, like some kind of enforcement service provided by the government, where others can report safety concerns and that service goes and does something about it legally?
You are probably unaware of unintended consequences enabled by this app - many women use it to find bad boys they feel attracted to due to some brokenness in female psyche. So you'll get public outrage on one hand and private DMs on the other from them, based on how bad you are described/vetted by other women on the app.
Online men-dominated forums often dislike and feel personally attacked by people talking about sexual abuse/harassment done by other men. I guess they immediately imagine themselves being falsely accused of such acts, rather than being a woman that is attacked.
I think groups in general feel personally attacked by things that attack people on the basis of their immutable group characteristics. Notably women dislike and feel attacked by unqualified statements like "women are crazy" or calling someone a "karen". Black people dislike and feel attacked when people talk about "ghetto trash" or "welfare queens".
Sure any individual discussion about an individual might justifiably refer to that person as "crazy" or "ghetto trash". But the nature of online spaces, and the nature of the public discourse that tends to bring these phrases and discussions into the public eye very quickly starts painting people with broad brushes.
People also feel attacked because often times discussions tend to confuse useful rhetorical devices for conveying a point with justification for a behavior that has harmful impacts on the broader group. For example, it was pretty common to here the "bowl of M&Ms where one M&M is poisoned" analogy in the height of the "Me Too" movement. It's a useful rhetorical device for explaining why someone would fell cautious about a strange man, and why they wouldn't start from a position of trust. But it's also a terrible way of generally treating men in your life, and a terrible broad philosophy for organizations and governments to follow.
And we know this rhetorical device makes bad policy and at large is harmful to innocent people because another time in recent history when that analogy was really popular was immediately after the Sept 11 attacks when talking about Muslims in general and immigrants from Muslim countries. Surely no one would find it strange that Muslims might dislike and feel personally attacked by "people talking about crimes and terrorism done by other Muslims" in the same way that many online spaces talk about "sexual abuse/harassment done by other men". Surely we wouldn't be surprised if people felt attacked or disliked an app for sharing anonymous and private information about suspicious Muslims right? Or let's say someone noticed that black people are statistically 2x as likely relative to their population to be the offender of a violent crime[1]. You'd reasonably expect people to be bothered by an app that excluded black people from signing up and was entirely about strangers providing un-verified experiences with black people under the premise of keeping people safe.
Ultimately, people are bad at statistics and really bad at understanding the degree to which a small minority of individuals can affect a large majority of people by virtue of repeat offending. So it can be true both that lots of people have completely valid awful experiences with members of a given broad group, and that members of that group feel unfairly maligned when discussion about those experiences paints with broad, unqualified strokes.
If you had a son, would you think it's good spiteful women from his past were labeling him some kind of abuser on TEA when he has no way to know these allegations even exist?
Not only that, I think they're forfeit their Section 230 protections since they're exercising editorial control by excluding males from the platform. So they'd be directly liable for any defamation they publish on their platform.
It would be in Apple and Google’s best interest to pull these apps immediately. Multiple Supreme Court justices have indicated an interest in narrowing the breadth of section 230 immunity. This app, structured entirely around effecting the reputation of private individuals, provides a relatively clean case to do so. It’s not a stretch that the app could be considered a ‘developer in part’ of the content it hosts, and thus lose section 230 protection.
A narrowing of section 230 would not be good for Apple or Google, though they wouldn’t face any liability for the Tea apps conduct.
It continues to confuse me that the publisher/distributor distinction that section 230 was meant to remove (created by prior Federal court decisions) gets so frequently interpreted as if section 230 had been intended to establish it.
To me this feels as if people widely thought that the Apollo Program was intended to prevent people from traveling to the moon, or Magna Carta was meant to prevent barons from limiting the king's power, or Impressionism was all about using technical artistic skills to depict scenes in a realistically detailed way.
Thanks for posting the link. I had read that before and forgot.
I think sometimes confusion about Section 230 maybe points to some legal soft spots.
I think there's a trend — good or bad — for courts to see websites as accountable for users' activities on the site when those activities are systematic and collectively illegal or jeopardized, when the website is seen as encouraging the activity.
It's not hard for me to imagine a court deciding that the intrinsic nature of the website encourages systematic libel, and is therefore is somehow involved in the creation of post content.
Even more specifically, I'm not sure the "good faith" clause of Section 230 even applies to something like Tea in the case of libel, should libel be there.
Now, actually showing libel is another thing, but that's also easier for me to imagine today than even a year ago, especially in the presence of a data breach where posters are exposed.
I guess I don't see Tea as being held legally responsible for anything about the content of user posts, in the US at least, for the reasons outlined in that article. But I also wouldn't be surprised if it did happen.
> I had no idea that it was effectively unconditional protection.
Defamation is still not protected, it's just the person who posted it who is liable. Meanwhile the site's "editorial control" is protected by the first amendment, not section 230.
Because they seem to want it to work that way and seem to think that by spreading the misinformation that it will somehow change the way the law is interpreted.
We need to stop allowing companies that are not directly engaged in financial services to request government IDs.
Facebook shouldn't legally be allowed to demand an ID any more than this disaster of an "app."
Now tens of thousands of people will be subject to identity theft because someone thought this was a neat growth hacking pattern for their ethically dubious idea of a social networking site.
A secure Know Your Customer API would be a useful service for Apple and Google to provide to developers. It could scan the ID and reveal individual pieces of information with permission to the application or multiple applications. Forgive me if it already exists and this app just wasn’t using it.
You are going to show your ID to at least one foreign company with dubious data collection history, because the government will eventually force it on you.
There are verifiable credentials protocols which would let a site to check something (and prove that they checked it) without de-anonymizing the user.
It can be done with fairly basic cryptography. But the infrastructure around it would grow only if there's a demand. Otherwise people go with lowest denominator.
This. Appropriate regulation should make this an offense punishable by a large fine. There is almost no consequence to companies for bad practices.
Ideally you'd see fines in the 10%s of revenue. In egregious cases (gross negligence) like this, you should be able to go outside the LLC and recoup from equity holders' personal assets.
Absent broader regulation, we all know that apps like Tea depend HEAVILY on user trust. However, I am a bit concerned users either won't fully grasp the severity of this breach or won't care enough and end up sticking with the app regardless.
A somewhat embarrassing but relevant example: my friends and I used Grindr for years (many still do), and we remained loyal despite the company's terrible track record with user data, privacy, and security as there simply wasn't (and still isn't) a viable alternative offering the same service at the expected level.
It appears Tea saw a pretty large pop in discussion across social channels over the last few days so I'm pretty hopeful this will lend itself to widespread discussion where the users can understand just how poorly this reflects on the company and determine if they want to stick around or jump ship.
Or maybe require them to prominently disclose the breech to all current and future users on the app main screen for some period of time afterward (a year or two?). Sort of like the health-code inspection ratings posted in restaurant windows.
That cuts to the issue some other comments have pointed out, that user trust is really their most important capital – and with short attention spans and short news cycles, it may rebound surprisingly fast.
> Appropriate regulation should make this an offense punishable by a large fine.
And some kind of legal penalty for the engineers as well. Just fining the company does nothing to change the behavior of the people who built it in the first place.
I would at least love to see a public postmortem. What was the developer's rationale for storing extremely personal user data unencrypted, in a publicly facing database? How many layers of management approved storing extremely personal user data unencrypted, in a publicly facing database? What amount of testing was done that failed to figure out that extremely personal user data was stored unencrypted, in a publicly facing database?
Requiring a 3rd-party auditor perform a postmortem whose results are posted publicly might be an interesting regulatory approach to this. Companies get shamed for their mistakes, and also the rest of the industry learns more about which practices are safe and which are dangerous. A bit like NTSB investigation reports, for example.
>What was the developer's rationale for storing extremely personal user data unencrypted, in a publicly facing database?
https://www.teaforwomen.com/about
>With a proven background leading product development teams at top Bay Area tech companies like Salesforce and Shutterfly, Sean [Cook, creator of Tea] leveraged his expertise building innovative technology to create a game-changing platform that prioritizes women’s safety
If you're lucky, a clown vibe coded this trash. If you're unlucky, he paid someone to do so, and despite his proven background about leading top Bay Area companies, didn't even think to check a single time.
Wow, so the entire company is a Founder and a Social Media Director??
> With a proven background leading product development teams at top Bay Area tech companies like Salesforce and Shutterfly, Sean [Cook, creator of Tea] leveraged his expertise building innovative technology
Blah blah blah blah blah... Just goes to show that you can write all sorts of powerful sounding words about yourself on your About page, but it doesn't say anything about your actual competence. I mean, I don't have a "proven background leading product development teams" but I sure as shit wouldn't make obvious amateur-level mistakes like this if I ever did a startup.
In the US, professional certifications (PE, Bar, USMLE, CPA) exist to partially solve this problem when the certification is required to perform work legally. These are typically required in industries where lives and livelihoods of individuals and the public are at risk based on the decisions of the professional.
Joining in with some other comments on this thread, if the stamp of a certified person was required to submit/sign apps with more than 10K or 100K users and came with personal risk and potential loss of licensure, I imagine things would change quickly.
I'm personally not for introducing more gatekeeping and control over software distribution (Apple/Google already have too much power). Also not sure how you'd make it work in an international context, but would be simple to implement for US based companies if Apple/Google wanted to tackle the problem.
I think the broader issue is that we as a society don't see data exposure or bad development practices as real harm. However, exposing the addresses and personal info of people talking about potentially violent, aggressive or unsafe people seems very dangerous.
They shouldn't, but it appears to be a gossip app where by design they're also storing photos taken of other people (permission or not) and gossip about them...
The cynical part of me feels like certain employees had uncontrolled access to the user data.
There would be a morbid irony in the idea of a tool marketed as increasing safety for women actually being a honeypot operation to accumulate very sensitive personal information on those very women.
I think we can treat it as currency. All nine letters of my SSN, for example, I’ll allow you to store those if in return I get to store the name of the CEO’s boat.
According to another media report, the approval queue for new account verification was seventeen hours long. It's possible what the 4channers got was that approval queue.
> The app aims to provide a space for women to exchange information about men in order to stay safe, and verifies that new users are women by asking them to upload a selfie.
What exactly does this mean? Which information is exchanged without consent of these people? This seems to me more problematic than the actual topic of the data breach.
1) you dated a guy on tinder, he became all pushy on your first date, touched you inappropriately even though you said no. Or some guy became violent during your relationship and you even found out he has a history of that.
2) you dated a nice guy but he dumped you for whatever reason, and now you want to get back at him so you make up stuff like mentioned above, and post it there.
That's PR speak for saying that it's a Kiwi Farms clone. I'm sure the two userbases even share their sense of righteousness regarding their own actions.
This case couldn't be more clear cut. It's horrid, and the people running the sites should be held accountable. Two wrongs don't make a right, especially when it will inevitably cost innocent lives, sooner or later.
Your argument boils down to "there are very bad people out there so we need another Kiwi Farms to fight this."
I have heard this type of rhetoric so many times and it makes me sick to the stomach every single time. So much evil are done in the name of protecting victimized people from the worst offenders. Police militarization, illegal mass surveillance, censorship, extraordinary renditions, torture, invasions, using civilian starvation as a tool for war, killing medical workers, and many many more. Doesn't make any of it right.
"Women having a platform to talk with each other without men is somehow equivalent to killing medical workers and torture".
See, it's easy to "boil arguments down". However, this is a forum where we're supposed to interpret what people say in the best possible way.
That said, I am having trouble figuring out how you manage to compare an online stalking and bullying website to a forum where women can warn each other of serial assaulters. The intention is clearly entirely different, even if both are open to abuse (like every forum of every type ever).
You demonstrated a straw man argument. I called you out for using a certain type of rhetoric, commonly referred to as "think of the children." There's a big difference. I "boiled down" your argument to the type of rhetoric being used.
> However, this is a forum where we're supposed to interpret what people say in the best possible way.
How ironic. You first presented an example of a bad faith reinterpretation of my comment to demonstrate a fallacy. But then repeated that same reinterpretation in your own argument. How can you present a bad example, and then immediately follow that example?
You also took my use of the term "boil down" out of context. That too isn't the "best possible interpretation."
> The intention is clearly entirely different
The pretext doesn't matter. The "intention" of killing medical workers may be fighting terrorism. Doesn't make it right.
I'm not even sure that there's a difference in pretext either between this and Kiwi Farms. Both userbases claim to expose bad people.
My argument was that because women can not rely on the justice system, you can't blame them for resorting to talking to each other on the internet about potential predators.
That's not a "strawman argument", it's just basic common sense - if the law isn't protecting you, then you have to protect yourself. As someone else itt put it: Women being vigilant is rational behaviour".
And while you lambast my source (despite the fact that any set of statistics you like will say that rape has heinous reporting, referral and conviction rates), you say yourself in a sibling comment that the only way to fix this is by improving the justice system. You admit, in your own words, that the justice system is inadequate here and not fit for purpose.
Your beef, as generously as I can interpret it, seems to be that allowing women to talk to each other about potential predators could result in false accusations (that's what a "think of the children" argument looks like btw). You then repeatedly conflate this forum with "torture", "mass surveillance", and an organized bullying group that has caused at least 3 suicides - that part I can't wrap my head around. You even compare this forum to "censorship" - the rank irony is giving me a headache.
All the crazy things that have happened in the last 6 months, and this is what has you up in arms. Women talking to each other, trying to protect themselves from assault and rape. Absolutely wild.
> All the crazy things that have happened in the last 6 months, and this is what has you up in arms. Women talking to each other, trying to protect themselves from assault and rape. Absolutely wild.
You have no idea what else he is or isn't up in arms about.
Given that the concern is users of this app /making stuff up/, this line is a touch ironic.
> You have no idea what else he is or isn't up in arms about.
I actually looked back through 6 months worth of their comments. This is the angriest they've been here.
> Given that the concern is users of this app /making stuff up/, this line is a touch ironic.
I don't know why you would believe that I claimed to know what they're like in their personal life. It seems pretty obvious to me that I'd be referring to their comments here, but consider that point clarified now.
You're misconstruing what I said so many times in ridiculous ways that it's impossible to call out every single one of them.
> That's not a "strawman argument"
Except the straw man I was referring to was your misconstruing of my argument. You can't pull off another straw man to prove that something isn't a straw man.
> you can't blame them for resorting to talking to each other on the internet about potential predators.
I did not. I'm against profiting off a site that's entirely about people anonymously gossiping about others. Moreover the site encourages users to "share experiences, anonymous dating reviews, and support." It's not even restricted to vigilante justice, meaning that your point about the site being about predators is a false premise.
From another article [1]:
> "What clubs does he go to?" another person asked on a different post. "He’s cute."
This is in line with the purpose of the platform. But how would you feel if someone else secretly publicized your whereabouts in this way while gossiping about your looks?
> And while you lambast my source
That's another bald faced lie that distracts from the issue, which is running a Kiwi Farms clone with a PR spin. I didn't even mention your statistics because it's irrelevant. Like with all agendas pushed under the "think of the children" style narrative, it doesn't solve the issues it purports to solve. All it does is destroy more lives.
> You admit, in your own words, that the justice system is inadequate here and not fit for purpose.
The justice system is the only chance there is of achieving justice. Your preferred replacement of tech entrepreneurs encouraging people to throw rocks at total strangers and profiting off of it is the exact opposite of justice.
If there's anything wrong with the justice system, it has to be fixed. Ditching the rule of law in favor of systemized mass-scale mob justice is a non-starter.
> Your beef, as generously as I can interpret it, seems to be that allowing women to talk to each other about potential predators could result in false accusations (that's what a "think of the children" argument looks like btw).
How can you possibly lecture others about charitable interpretation of other people's arguments? That's an egregious misrepresentation of what I actually wrote. And you pull this trick over and over again.
> You then repeatedly conflate this forum with "torture", "mass surveillance"
> You even compare this forum to "censorship"
Another lie. Those examples were brought up in relation to the validity of "think of the children" rhetoric, not the forum.
> You then repeatedly conflate this forum with ... an organized bullying group
I don't think they consider it bullying, but rather an act of justice against evil people. I disagree though.
> the rank irony is giving me a headache
That's because your "irony" is a malicious straw man. It's giving me a headache as well.
> All the crazy things that have happened in the last 6 months, and this is what has you up in arms. Women talking to each other, trying to protect themselves from assault and rape. Absolutely wild.
I am up in arms against what has happened in the last 6 months, or actually, way longer than that. I'm not up in arms against women talking to each other.
If anything, your reactionary views on justice and your barrage of omissions, diversions, and outright lies to make your point makes you much more closer to the people you're trying so hard to associate me with.
When all is said and done, the heart of your anger is that women might be "secretly publicizing" (your exact words, lol) things about men - sometimes about "their looks", and sometimes about the threat of assault and rape.
That's more than silly. It's dangerous for our sisters and mothers, and an attack on free speech.
I sincerely hope you can recognize that the threat of rape and assault rather outweighs the threat of people saying mean and untrue things about you behind our back. If not, well, then you might be the type of person that forum was made to talk about.
I was curious what the percentage of false allegations are, as this is often quoted as a problem by men online¹. The conclusion of my research is that the rate of false reports is essentially the same as for any other crime (so somewhere in the single digits).
¹: I am a man myself and I understand that men feel threatened this may happen to them. But I personally know multiple women who experienced sexual violence and zero men who were accused of rape
The statistics are hard to come by, but at a glance the rate of successful rape convictions is similar to the rate of proven false allegation. And both are in the single digits.
So how to neutrally approach this? If you ignore cases without a conviction it's close to 50/50. Seems implausibly high though.
And then how do you factor in everything that didn't go to court?
25 of every 1000 rapes ends in a conviction(2.5%)[1]. What percent would you estimate that would have to increase to in order to count as a large enough improvement to the justice system to obsolete the need for whisper networks?
There is no "need" for the destruction of justice and the rule of law. Citing crime statistics doesn't change this fact. You're literally bringing up the "tough on crime" rhetoric yet again, it's been used as justification for the kind of things you're promoting since the start of time, and not once has it brought about a better outcome.
> There is increasing evidence to suggest that women commit as much or more IPV as men (Archer, 2000; Melton & Belknap, 2003). Among adolescents, research consistently shows that females perpetrate more acts of violence in intimate relationships than males.
> Anderson (1998, 1996), presented self-reported prevalence rates for women's sexual coercion of between 25% and 40% and for physically forced sexual contact between 1.6% and 7.1%. Of perhaps greater significance was the women's self-reports of engaging in a classic date-rape scenario - taking advantage of someone who was under the influence of alcohol or drugs. When asked about initiating sexual contact with a man when his judgment was impaired by drugs or alcohol, between 32% and 51% of the women said that they had. Further, between 5% and 15% of women reported giving a man alcohol or drugs in an attempt to have sexual contact with him.
Obviously, these self-reported female rapists are going almost completely unpunished! Everyone needs equal access to these groups. That also solves the problem of libelous claims that the victim doesn't have an opportunity to address.
you forgot the most common use cases in practice: a man you work with slighted you in some small way. now hes going to have sexual assault red flags. the HR lady who already hates men will look you up on tea and decline to hire you because you dont have green flags.
Gossip about the opposite sex is probably the world's oldest social activity. The problem is that the internet lets it happen at industrial scale, and obviously that can be misused or have dangerous unintended consequences.
It's the digital version of a whisper network. Whisper networks have been around as long as humans. Informal ways for people (often women) to share warnings will always self assemble when formal systems don’t protect them.
That said, you;re right to raise concerns about consent and the ethics of sharing information about people without their knowledge. These systems inherently involve trade-offs. When the risk is violence or death, the cost of a false negative (saying nothing) is obvious. So people naturally lean toward maximizing sensitivity, even if that means lower specificity. That;s not ideal, but it's understandable in a world where formal accountability is inconsistent at best, and finding out after the fact isn't an option.
Their existence reflects a failure elsewhere. If we want to reduce the need for them, the solution isn't to shut them down but to make them obsolete. The solution is building systems and cultural norms where violence and coercion are reliably called out and acted upon.
If that idea feels scary or unfair, that's the emotional context many women are already living in. Understanding that is the first step toward addressing why these networks exist in the first place.
Maybe this is a good time to think about what policy could help discourage these horrific practices (it sounds like their storage was unprotected)
* App Store review requires a lightweight security audit / checklist on the backend protections.
* App Store CTF Kill Switch. Publisher has to share a private CTF token with Apple with a public name (e.g. /etc/apple-ctf-token ). The app store can automatically kill the app if the token is ever breached.
* Publisher is required to include their own sensitive records ( access to a high-value bank account) within their backend . Apple audits that these secrets are in the same storage as the consumer records.
There has to be a better way than just adding another deterrent to starting a company. Could there be an industry standard for storage security? Certification (a known hurdle) is better than "don't fuck up or we'll fine you to death".
Regulate software development. Other industries already do this.
You could:
- make Software Engineer a protected title that requires formal engineering education and mentorship as well as membership to your country's professional engineering body (Canada already does this)
- make collecting and storing PII illegal unless done by a certified Software Engineer
- add legal responsibility to certified Software Engineers. If a beach like this happens they lose their license or go to jail. And you easily know who is responsible for it because it's the PEng's name on the project
- magically, nobody wants to collect PII insecurely anymore or hire vibe coders or give idiots access to push insecure stuff
- bonus: being a certified Software Engineer now boosts your salary by 5x and the only people that will do it actually know WTF they are doing instead of cowboys, and that company will never hire a cowboy because of liability. The entire Internet is now more secure, more profitable for professionals, and dumb AI junk goes in the trash
I think fines are very reasonable. If you can’t safely do the thing, you should be punished for doing it. If you can’t safely safely do the thing then there is no issue.
Certification is essentially "don't fuck up or we'll fine you to death" with extra steps. Especially because it mostly comes down to the company self-verifying (auditors mostly just verify you are following whatever you say you are following, not that its a good idea).
Its not like anyone intentionally posts their entire DB to the internet.
This is the only way to deter this. Negligence and incompetence needs to cost companies big money, business-ruining amounts of money, or this is just going to keep happening.
the problem is what are the damages? how much are those damages?
My SSN / private information has been leaked 10+ now. I had identify fraud once, resulting in ~8 hours of phone calls to various banks resulting in everything being removed.
Having the threat of lawsuits is not really about the actual lawsuit, its about scaring people into being more careful. If you actually get to the lawsuit stage, the strategy has failed.
> We can reduce the latency of discovery and resolution by adding software protocols.
Can we? What does this even mean?
[Edit: i guess you mean the things in your parent comment about requiring including some sort of canary token in the DB. I'm skeptical about that as it assumes certain db structure and is difficult to verify compliance.
More importantly i don't really see how it would have stopped this specific situation. It seems like the leak was published to 4chan pretty immediately. More generally how do you discover if the token is leaked, in general? Its not like the hackers are going to self-report.]
The signatures would appear in the drop . A primitive version would be file meta data or jfif. Even the images themselves or steganography could be used
I guess, but it seems a bit like a solution that only works for this specific dump - most db breaches don't have photos in them.
My bigger concern though is how you translate that into discovering such breaches. Are you just googling for your token once a day? This breach was fairly public but lots of breaches are either sold or shared privately. By the time its public enough to show up in a google search usually everyone already knows the who and what of the breach. I think it would be unusual for the contents of the breach to be publicly shared without identifying where the contents came from.
That's a reactive measure. Certainly, it's worth pursuing. Though like the notion that you can't protect people from being murdered if you only focus on arresting murderers, there is a need for a preventative solution as well.
just use your brain and don't upload your face and driver's license to a gossip website. when I was growing up, it was common knowledge that you shouldn't post your identity online outside of a professional setting.
The onus is on users to protect themselves, not the OS. As long as the OS enables the users to do what they want, no security policy will totally protect the user from themselves.
While true, using that logic I can say porn is also discussed at work if you work in the porn industry :)
On a more serious note, implementing such a law without also providing a 0-knowledge authentication system ready to use by the government is just so unbelievably stupid (for multiple unrelated reasons).
This is becoming more unfeasible as it becomes required to access online services like reddit, nexusmods, verification on dating apps. Sending facial, and documentation data is becoming mandated by governments across the world.
Good thing our children will learn all about this at their mandatory Internet Literacy Fundamentals course they have to take in high school.
Oh wait—no such thing exists!
It's up to us to teach this to our children. There's no hope of getting the current generations of Internet users to grasp the simple idea that app/website backends are black boxes to you, the user, such that there is absolutely nothing preventing them from selling the personal information you gave them to anyone they see fit, or even just failing to secure it properly.
Without being a developer yourself or having this information drilled into you at a young age, you're just going to grow up naively thinking that there's nothing wrong with giving personal information such as photos of your driver's license to random third parties that you have no reason to trust whatsoever, just because they have a form in their app or on their website that requests it from you.
In this case it appears to be a public Firebase bucket; shutting down the app wouldn't help. Quite possibly access to Firebase was mediated through a backend service and Apple couldn't validate the security of the unknown bucket anyway.
Also about validating the backends, apple has the resources to provide a level of auditing over the common backends. S3, Firebase -- perhaps the top 5. It's easy to provide apple with limited access to query backend metadata and confirm common misconfigurations.
wouldn't it be funny if the app store had to review it and make sure the personal info was sensitive and possibly humiliating enough . "sir your app has been denied because MY_PERSONAL_INFO table requires at least 3 d-pics"
* Mandate 3rd party auditing once an app reaches > 10k users
* App publishing process includes signatures that the publisher must embed in their database. When those signatures end up on the dark web, App Store is notified and the App is revoked
> * Mandate 3rd party auditing once an app exceeds 10k users
You have a lot of interesting suggestions.
I would love to see some kind of forced transparency. Too bad back-end code doesn’t run under any App/Play Store control, so it’s harder to force an (accurate) audit.
also i remember maybe Facebook trying to do this when they acquired Parse. For a while they were promoting developers host their backends on Parse / FB .
The idea has merit. You have to relinquish some control to establish security. Look at App Store, Microsoft Store , MacOS App store -- they all sandbox and reduce API scope in order to improve security for consumers.
I'm more on the side of autonomy and trust, but then we have reckless developers doing stuff like this, putting the whole industry on watch.
thanks. Yeah I think there are a lot of ways to decouple App store from publisher and auditor . That way the publisher can retain autonomy / control , while still developing trust with the consumer.
We could do better in our trade at encouraging best practices in this space. Every time there's a breach , the community shames the publisher . But the real shame is on us for not establishing better auditing protocols. Security best practices are just the start. You have to have transparent, ongoing auditing and pen-testing to sustain it.
better, in that the app store has more weight and more leverage to establish more comprehensive auditing.
The EV certs failed because general SSL identity is pretty weak. Consumers don't know how to use it to establish trust. There's no enforcement on how the names are used. for example, my county treasurer has me transfer thousands of dollars on a random domain name.
Linux is up to 5% of the desktop. Gog and Itch.io are DRM-free, and are slowly gaining ground against Steam. Fediverse networks are slowly gaining ground against traditional social media. Signal is more popular then ever.
There will always be lowest-common-denominator users, but there is clearly some demand for an alternative to the biggest 5 websites...
Meanwhile, an Android app for some random banking or government thing will require an attested boot chain measured all the way down to the stage 0 ROM burned into the SOC. That's not to say the open ecosystem isn't better, but to say it's winning enough to guarantee sustained general purpose viability is simply untrue.
>There will always be lowest-common-denominator users,
Interesting play, calling 95% of users "lowest-common-denominator". Those silly, blabbering morons that don't understand that they should be running Bazzite on their Framework laptops instead of using evil evil sofware.
>there is clearly some demand for an alternative to the biggest 5 websites...
This demand doesn't pay, and also happens to be some of the most demanding, entitled users you'll have ever seen.
>* App Store CTF Kill Switch. Publisher has to share a private CTF token with Apple with a public name (e.g. /etc/apple-ctf-token ). The app store can automatically kill the app if the token is ever breached.
How do you enforce the token actually exists? Do app developers have to hire some auditing firm to attest all their infra actually have the token available? Seems expensive.
I disagree; if you suggest doing something, and someone points out a (legitimate) potential flaw/problem/shortcoming/difficulty, then that person has helped you and improved the conversation. Full stop. It might be nice if they can also suggest something better, but it's not necessary. It might even be in the final outcome that the original idea is still the best option, and even then it is preferable that its problems are known and hopefully considered for mitigation.
That still doesn't make sense. How does the ACL work? What prevents the usual shenanigans like cloaking to prevent legitimate detection from working? Moreover what secrets are you even trying to detect? The app API token?
I can't be constructive when your proposal is too vague to know how it works, I'm forced to take pot shots at what I think it is, and you getting upset because I'm not "constructive". Thoroughly explain how your plan works beyond the two sentences in your original post, and I can be "constructive".
We need a more nuanced headline here. They did nothing responsible. 404 should title this story with something that will blame them first and the 'hackers' 2nd.
Yeah, the term "breached" was a very poor choice, because it sounds like "this was breached recently" instead of telling "the database could be seen by anyone ever since the app's conception, and it only came to light today" which has much worse implications.
This app's data store was "breached" in the same way that one breaches a castle by walking across the lowered drawbridge, through the open gate, past the empty guard stations.
I wouldn't go that far. What they uncover with their FOIA requests that the general public would otherwise never know about tends to be quality content. And, like the Wired, their FOIA-based articles aren't paywalled.
I hope it served as a good lesson to the average person to be more cautious while submitting sensitive information like a government ID. Just because it's an app with a nice UI doesn't mean it's secure, let alone trustworthy regarding who owns it. Last week I was contacting a government agency here in Canada and the support team requested a government ID to be shared over email, which is anything but a secure communication. I tried to share it as a link to my vault, but they refused, so now either I will have to go in person or they will find another way in the meantime.
The internet went from 'YouTube asking users to never use your real name' to 'you have to submit your ID to some random app' in 10 years. Crazy!
CEOs and board members should be personally criminally liable for shared personal information coming out of their platforms.
It's the only way they will push companies to STOP storing them long term.
I've been in several companies (mostly FinTech) that store personal sensitive documents "just in case". They should be used for whatever is needed and deleted. But lazy compliance and operations VPs would push to keep them... or worse, the marketing people
To be fair to the FinTech companies and their leadership, banking and finance laws are so draconian to the point where you'd rather store (and risk leaking) sensitive data than face even bigger fines from the government overlords. If you want that to stop, get rid of the PATRIOT Act and reform the KYC insanity.
> I hope it served as a good lesson to the average person to be more cautious while submitting sensitive information like a government ID.
This absolutely should not be normalized. If I'm ever prompted to submit photos of a government ID to some service, I'm turning heel. I'll try to use their phone service (which I just did successfully this week), correspond via mail or maybe, as you've said, handle it in person but I'm probably content to go without.
The sad part is that your government ID is about as likely to be leaked by the government agency itself than it is by any third party that has an scan of it.
My driver's license is scanned every time I buy beer. I'm under no illusions that it's not quite readily available in any number of leaks or disclosures.
If that sounds defeatist, maybe it is. Nothing online is private. Once it's in a database, it's only a matter of time before it's exposed. History has proven this again and again.
You need to do this for background checks for employment, even though the employees for the background check service might be outsourced to a different country, and your government data had no protections in their jurisdiction.
I always do. I would have never made social media accounts if it required phone or ID. Thankfully I'm old so my accounts were made before normies flooded the net and started trusting everything.
> Thankfully I'm old so my accounts were made before normies flooded the net and started trusting everything.
It wasn't "normies" so much as it was the leadership and early investors of Facebook shoving "just trust us" and FOMO literally everywhere online. The hype (and hope) in 2010 was REAL and almost all privacy related conversations were shut down on sight. Heck, I think I still have my copy of Jeff Jarvis's Public Parts (ISBN13 9781451636352) somewhere in my closet. Amazing read if you really want to understand the mindset in place at the time.
> The internet went from 'YouTube asking users to never use your real name' to 'you have to submit your ID to some random app' in 10 years. Crazy!
Because we couldn't get anyone to take the internet seriously if it was just a bunch of anonymous pseudonyms trolling each other. And maybe that was a mistake.
It was definitely a mistake. The internet was not meant to be taken seriously. Measures like real name policies are designed to make people take it seriously but that is to the detriment of the users who do.
Just look at Facebook. Users with real names sharing all kinds of inane schizo nonsense, extremism, building echo chambers without realizing it, becoming completely divorced from reality as perceived by the majority of people around them in meatspace, because they section themselves off in cyberspace.
On the rare occasion when I have to do this, I blur the maximum amount of the image and watermark it with hundreds of lines of small red font saying “FOR EMPLOYMENT VERIFICATION BY $X_ENTITY.”
If they have a problem with it then I will gradually remove pieces until they’re okay. But I haven’t had to do this the few times I’ve used this tactic – it causes issues with automated scans but eventually some human manually reviews it and says it’s okay.
What I don’t like is the “live verification” apps that leave me no choice but to take a photo of it.
>What I don’t like is the “live verification” apps that leave me no choice but to take a photo of it.
That's becoming the norm now, presumably because of concern that people are taking leaked scans from one site, and using it to commit identify fraud (eg. getting KYC scans from crypto exchanges and using it to apply for accounts at other crypto changes, for money laundering purposes).
If my license gets leaked and then a stalker shows up at my house, I will simply turn them away on the grounds that it was illogical to assume the license wasnt faked.
I don't disagree, but there are most certainly other perpetrators of identity theft out there. Not sure any of them would bother using it to sign up for something as niche and unprofitable as an account on Tea.
Outsourcing job was it? Modern programmers are literally terrible at all basic stuff (who stores ID images in the db and then in the clear, do you have many other mental issues or what?) (I see startups like Resend making the same mistakes and still people use them, so there isn't much punishment even from people with half a brain) and AI is going to make it all so much worse. And a public bucket. I think it should be criminally liable to be that sloppy.
I don't think it's a modern programmers problem, in fact, I think we can argue we are much better than 20 years ago at least in terms of security.
There is a much higher concern for data validation and no one used HTTPS 20 years ago. Literally there were social networks with people uploading photos and personal stuff which didn't even have HTTPS.
But that was because no one told them. Now they are told and taught. A lot of systems Warn even for opening something publicly... And yet.
I check all CVE's of the software my clients use because we need to figure out why things are broken and often this is a start -> unpatched CVE's. Most (by far) CVE's are not 'honest mistakes' or missed corner cases because rocket-science; they are just sloppy programming. Something that should never pass review. We DO know better but people ship things and hope for the best (including the case in this post etc).
> But that was because no one told them. Now they are told and taught.
That's precisely my point.
> Most (by far) CVE's are not 'honest mistakes' or missed corner cases because rocket-science; they are just sloppy programming.
This is actually true, but it's true because we have way better tooling and safer languages, which means we don't see nearly as many buffer overflows or memory management issues.
It's not that you didn't have negligent programmers back then.
> Something that should never pass review. We DO know better but people ship things and hope for the best (including the case in this post etc).
That's not new though. We've seen similar things happen in the past multiple times.
20 years ago code review was literally a bunch of meetings in a room or talk with another developer in person. Having something like github where you make a pull request, passes the automated test suite and requires a code review, etc. simply wasn't done. If in 2005 that already existed it was extremely bleeding edge.
I do have concerns about the code quality issues introduced by the abuse of LLMs, but until right before that was a thing, definitely the code quality in general has improved a lot.
Is there a way, to verify if potential partner uses this app? Or if they are in "are we dating the same guy" type of group?
I take doxing, stalking, revenge porn and cyber bullying very seriously! And I would pay good money for a background check, to stay away from such people.
You need to verify you're a woman with some form of ID before you can get into the app. Faking an ID and a picture can't be that difficult in the age of AI (especially not when the company that's supposed to verify you is this callous with their users' PII), but it's not as quick and easy as you suggest.
Would you want your own app usage available to other people? I’m going to guess not. This is a gross request, not surprised you’re using a throwaway account, as you seem to know this is a shameful thing to ask for.
And whatever happens on that app is not gross? If a revenge porn or csam site is busted, won't people want to know who were on it so that they can stay away from the potential predators? Isn't that why sex offenders' lists exist? Honestly, this app should be treated no less. The fact that they were able to remain on App and Play stores in the name of 'women's safety' demonstrate how grossly sexist, populist and vindictive the corporate structure in Apple, Google and the others have become. Binding one side to strict dogma and unwavering standards, while allowing the other side to anonymously wreak havoc on reputations is precisely the type of moral bankruptcy that's being challenged and assailed here.
If you could imagine what girls and women go through, some on a daily basis, for years, since childhood, I think you might have a better understanding of why a "gossip app" might actually be a pretty sensible option for avoiding sexual assault and worse.
I'm a firm believer that if you want to start a tech company, at least one of the founders has to have a technical background. Even if you outsource all the work, you need to be able to ask the right questions related to security.
It's not just that this database was accessible via the internet. It was all public data. Storing people's IDs in a public database is just... wow.
But now we have amazing vibe coding tools that mean that you don’t need to be technical or whatever - you can just deliver results. After all, the best LinkedIn influencers and founders don’t care about how something is delivered, just what.
Yeah, we’ve finally, nearly, just got to the point where realizing that treating IT and security and such as simply a cost centre to be minimised maybe quite wasn’t leading to optimal security outcomes - to throwing it all away again.
Tech background isn’t sufficient. They need to have security background. Some of the worst people I’ve met with respect to security have been technical enough to have the wrong level of confidence.
Doctors need to study 5 to 8 years and pass rigorous exams
Attorneys the same
Structural architects and engineers the same
We have a couple of decades more until we lock tech up, up until now it was all fun and games, but now and in the future tech will be everywhere and will be load bearing
Sad that a common response to "we might not want this app to exist" is "well, if you weren't cheating, you wouldn't have a problem with it".
Why do people want to live in a panopticon of their own creation, with random anonymous strangers morally policing, judging each other with zero consequence to them?
Don't think we'll ever learn our lesson when it comes to privacy, it will be Eternal September forever.
I think for many people see <cause> and any criticism of something that claims to be relate to that cause is seen as criticism of the cause and that's a full stop when it comes to thinking much further.
The irony in this case being that this app operates like a lot of creep subreddits and forums out there with people posting photos of other people without their permission and gossiping / telling stories about them...
I agree that you could make a Tea app for every faction's favorite cause, and use "safety" as the justification: report your local communist, report your local infidel, report your local secret white supremacist, report your local secret Western imperialism agent, report your local suspected jihadi, report a homosexual, report a suspected illegal immigrant, report a local adulterer, report an apostate, report a kulak.. etc. chefkiss
Witch Hunt as a Service, with a delightful UX, a little gamification, and soon integration with your favorite apps. Coming to an App Store near you.
It's so sad that legally you can't even say this was an intrusion. All data was already public. Probably vibe coded by the ceo who has no technical competence in whatever he vibe coded.
The leak contains drivers' licenses, but also location information. Someone on 4chan made a map of all the coordinates they could find and posted a public link.
I feel like that is part of the problem with it. Not only can somebody post about you make things up about you. You also may never know. And it could end up silently impacting you. Say you apply for a job and a female HR person checking your job application decides to use this app to do a "background check" on some of the males applying. If she sees someone on their saying you sexually assaulted someone, she probably isn't going to choose to interview or hire you. And she probably won't even tell you why. And the claim against you could be totally bogus.
This is the scary reality of an app like this, especially if it continued to go more mainstream.
Blaming women for wanting to seek out safety in this way is strange.
However there is something to be said about the crowd you find yourself with. If you assume this app to be necessary, I would assume your social standards are not high enough.
How fast would an app for men, to identify false accusers, liars, afterwards regret, baby-trapping attempt, sabotaging contraceptives, and other false claims, get shut down for 'evilness towards poor innocent women'?
Just as Parieto indicates that the bulk of male sexual assaults are done by a few, also indicates that the bulk of female assaults and claims of sexual assault are also done by a few.
Apps like Tea only paint all men as abusive thugs. If this were done, say to black people, this app would have been shut down and a lawsuit in federal court filed. But men are OK to harass, libel, and demean.
Good on anonymous for exposing this obvious double standard. And I hope they get sued by everyone.
Because our entire civilization is built on recipricoal alturism, which requires reputation so that in the event someone defects it carries negative consequences to discourage defection.
We're in agreement. Is an anonymous takedown app the solution for reputation management that enables civilization? If someone is trying to destroy your reputation, on which your entire livelihood depends, should you at least know who the accuser is, how reputable they are, what evidence they have? Do you want to give the Internet a magical button to destroy you on a whim?
I actually agree with you that this sort of thing can have bad outcomes and thus comes with significant risk for abuse. Part of the reason reputational systems work in real life is that the people bad mouthing other people also face reputational consequences if they do so unfairly (over a long enough time period where it becomes obvious), which is something missing from this type of app.
But regardless i do understand the appeal. Dating apps suffer from basically being a low-information market place. There are of course the malicious people, which everyone has an interest in removing from the app. However even ignoroing that its a bit of a lemons market (if you excuse how dehumanizing the metaphor is). Its very hard to tell if someone is a good date just from their profile, and people who are good dates end up in relationships and exit the market quickly while bad dates stay in the market for a much longer time. Allowing some sort of review system does solve that problem - its worked in other domains, like uber drivers or what resturant to go to. So i certainly understand the appeal of why people would want this.
I don't think that's a progressive feature. Say something about a federal government policy and Trump super fans will be all over you. Same goes for conversations about Tesla and so on ...
I mostly agree, but it's different for women due to how frequently they are subject to violence and how comparatively defenseless they are compared to the average man. Many women (and men) would gladly give up some privacy in exchange for (perceived) safety. And any man who doesn't understand that is either lying or has never known a woman.
It's fair that men and women have different challenges here. But humans are squishy and chaotic and self-interested, they're not angels of pure wisdom, fairness and justice. Giving someone a repercussion-free button to destroy someone else the instant they feel slighted, vindictive, threatened, jealous, disrespected, is a recipe for disaster. There's a reason these apps have not once worked sustainably, they always turn into a vile cesspool that brings the worst out of mobs.
I don't have a fix for this, it is entirely fair to want justice for the defenseless. At the same time I have a strong hunch that there is no problem-solution fit here, at least not with this sort of app.
What recourse would a man have against a woman who slanders him using this app just because X? Any person can have mental issues irrespective of gender.
One could say that about any company (because "fiduciary duty", amirite?).
"Don't let Toyota's 'reliable car at a reasonable price' marketing fool you, they're all about money." Yeah, but does that preclude them from selling me an actually reliable car at a reasonable price?
But when a company makes moral arguments ("We're better than others because of X") the bar goes up.
If Toyota says that we're the car company that cares about you, we want to keep you safe from the bad actors, and trust us on making right choices for you - and when you discover Toyota has been secretly building out an ad network, in bed with Chinese government, you have to call them out. And that's what Apple is doing.
Privacy is a human right, except in China where they are happy to go along with what the government wants. Google atleast had the balls to pack up and leave the country.
Apple fired its Chief Diversity Officer when she said that white men with blue eyes can also count towards a diverse workforce. A purely non-monetary ideological capitulation.
I think it was a perfectly reasonable statement. But because it does not align with a recent radical redefinition of diversity, she was fired. Apple certainly wasn’t at risk of losing money over keeping her in that role.
I date men and don't think going against TOS or laws is okay even in the name of 'safety'. This app doesn't bother me and frankly I think more apps like this should be allowed, but it is hypocritical to think this should be allowed to exist and many others not.
Can't say I expected it, but surely you can see the poetic justice. A response in kind. It's nothing like the analogy you're dragging in -- SA for dressing a certain way. Rather, it's doxing for doxing. Don't dish it out if you can't take it.
A flash in the pan gossip app that when it functions normally is not worried about anyone's privacy / accuracy ... also doesn't care about good policies or their user's privacy.
Painting this as a "gossip" app seems extraordinarily reductive. Women have a good incentive to share info about and to one another for safety beyond "gossip."
Is it reductive? It also has good incentive for someone jilted or misinterpreting something to suddenly tarnish someone's reputation with little recourse for the other party. It is a one-sided review app for people in a way that people affected may never even know!
There are plenty of examples of people making things up about other people who they thought wronged them. Mob justice is really disgusting, and that's all this site is. People justify horribly vindictive behavior when they think they're righting a perceived wrong.
If guys had an app that women couldn't access where we shit talked all of our exes with photo evidence women would riot at the company HQ.
But then again, can't convince people as a whole that men are, on average, good and decent people with normal flaws just like women, and therefore deserve to be protected, loved, and appreciated equally.
In 2008 when the GFC every company we worked IT for on contract fired their IT staff first. Two weeks later, we had bonanza period right through into the next year. They realised the hard way that those lowly cheap IT staff were quietly keeping them afloat. We charged a lot to fix their problems they created because their CEO thought IT was a waste of money.
This will prove security in IT coding is necessary, so enjoy watching the drama unfold.
> At 6:44 AM PST on 7/25, we identified unauthorized access to our systems and immediately launched a full investigation to understand the scope and impact of the incident. Here’s what we know at this tim
The first sentence is already a lie as there was never authorization in place followed by more lies.
Not to be overly pedantic but authorization and security are two different things. If I leave my front door unlocked and open, that doesn't mean Bob the Homeless Hobo is authorized to enter my house.
On X, one of the leaked pictures seemed to be a DoD ID card, and I wondered why Tea needed proof of someone's identity. Then I remembered Uber and Lime both want your drivers license. Facebook and Instagram supposedly request it too if your account gets locked. This is not a new normal I like.
This reminds me of people saying "a honest person has nothing to hide". A honest woman who has nothing to hide, would post stories under her name and write her address, GPS coordinates and phone number in case someone needs clarifications or has objections to the post.
Even if only a few women are abusive and gossiping, they will doxx a lot of innocent men. At that stage, that entire app should be treated as illegal and shut down, instead of hoping that Apple legal will find the time to settle each complaint. The entire app is a toxically bigoted concept that gets a pass because the term 'women's safety' is attached to it.
I'm failing to see how this app is legal. States like Arizona have recently passed anti doxxing laws. Posting any information on this app with the intent of social pressure, harassment, etc is illegal in those states.
At the very least, the app itself might be legal using the "public forum" argument but the content posted on there definitely leaves the users in a legal gray area.
I can see the argument on both sides but this is asking for a case to be brought just so the law can be fleshed out.
I recently saw a screenshot from one of these apps (so I can't guarantee its authenticity. But it's not an inconceivable scenario). Someone posted a man in there with his photo. The elephant in the room is that the man is dead! His ex-wife (with whom he had children) is enraged by this and is demanding to have it removed. Instead of addressing her concern, one of them decides to report her!
Now this may be an anecdotal argument. But when it pertains individual rights and human dignity, even a single violation is sufficient to question the ethics and legality of such endeavors. An important fact here is that nobody has absolute rights. Any rights are valid only as long as they don't infringe on someone else's rights. So, smearing, maligning and vilifying someone cannot be justified in the name of 'women's safety'.
This is one of those cases where you can't find a balance between both sides. One side is objectively wrong. Ruining the lives of any number of innocent men must not be an acceptable compromise for ensuring women's safety. There must be ways to achieve that without causing such widespread collateral damage. Their argument to the contrary is not just lazy, it reeks of hubris and contempt.
I don't usually care about downvotes, but it's alarming when those votes are in support of a bigoted stance like in this instance. I don't support doxxing, defamation or bullying of any innocent person, including women. But why is this utterly detestable act being justified and upheld when the victims are men? Would the response be the same if the genders in that message were swapped? This is just a single example of how unabashedly sexist the HN crowd in general (and the corporate world in general) has become. I hope that the individuals who strike at the opposition to such toxic behavior are very proud of their irrationally lopsided sense of justice and their contributions to a very fractured and bitter society.
It's almost poetic that this happens on the same day UK demands website to collect personal identification. I'm looking forward to the shitshow in the upcoming months.
Gentlemen, we're working on a new app called Eyeroll. It's a revolutionary new dating app, where our users can rate the women they have dated based on favorable and/or unfavorable attributes. Every month, our marketing team will generate a scoreboard of profiles that score highest on all mainstream attributes, and our search and filter function will rival that of Amazon (including the much requested sort by lowest first.) We're seeking $23-to-$23.5 million in funding to get our product over the finish line.
for someone who thought Tea was a good idea, what would be the objection be if this leaked contributor data were used to populate a similar app to warn men off?
obviously it would be malicious and unethical, but since that didn't seem to stop Tea users, I'd be interested in what their arguments against it would be.
There's no objection, but it doesn't work because men compete while women collude.
This has evolutionary origins. A man can, theoretically, father around a thousand children or more in the time it takes a woman to bear one. Sperm are cheap so those who need sperm (i.e. women) don't need to fight with each other. There's plenty to go around. Eggs are scarce so males of myriad species fight each other to the death over them.
- The fact that this app exists solidifies the data that a small group of men/women do most of the dating on tinder etc while the vast majority land dates far less if none at all.
- This creates distorted market supply and demand where those small group of men/women become sought after and its only human nature in that they value their supply less than the rest.
- Toxic behavior is expected from that small group of highly attractive people that do all the dating.
- It was only a matter of time before such app would run into legal issues or attract angry individuals. Now the damage to the leaked identities will be prolonged. With the AI tech today, the extent to which a damage can be done is unknown (ex. deepfake, impersonations, further doxxing).
- Tea user's driver licenses as well as selfies, usernames, emails, posts about their dates will drastically increase the surface area for lawsuits, fraud and exploitation by malicious agents.
- The users of this site and those that have directly posted images, details have opened themselves up to significant legal and criminal liability. Given these apps were probably popular in large city centers like California, NY have heavy punishment for digital harassment and privacy violations on top of the damages that can be claimed against them by the men who's information and details were posted.
- Tea is largely insulated from what the users post which means that their biggest exposure might be just neglect and failure to secure data which comes with a slap on the wrist.
Which will make it harder for Tea's userbase to claim large damages against it.
I read more details about this case and its beyond egregious. Unencrypted firebase and full public buckets. There is no hacking involved, the tokens were being used to pull data from roughly all 30,000 users of Tea and were only blocked short while ago.
Allegedly, 60GB of photos, user personal information, driver license, gps data being shared on torrent. A map of all 30,000 users tied to GPS data is being posted as well.
Given the extreme neglect to secure their data, I now believe Tea will be open to even bigger legal liability possibly criminal even.
> Allegedly, 60GB of photos, user personal information, driver license, gps data being shared on torrent. A map of all 30,000 users tied to GPS data is being posted as well.
Yeah, I wouldn't worry about the allegedly part, 4chan is dissecting that torrent as we speak, it's quite the party.
>> Let's be real you wrote men/women only to be PC. You really meant small group of men.
Let me share a message I got from a woman I met a couple years ago on a dating site: "Just a side note about the dating thing on here. I get very annoyed with how horribly men take care of themselves or even try to communicate. Most men today on these sites are repulsive. It was refreshing to see you smile, and look nice. Thank you for that."
So it's not a bunch of red-pill alpha guys. I'm an average guy with basic manners and a lack of creepiness. Heck I was near my all time high weight at the time. Every single woman on those things has at least one story about a guy she met that will make you cringe from his behavior. My fav was the guy who sent a woman flowers before even meeting her - at her workplace! Dude the cyberstalking you need to do to pull that off is CREEPY AF - not romantic.
If you want to be in that top 10 percent of men the bar is incredibly low.
People with stable values and relationships most likely won't be on these apps. The wide acceptance of hookup culture via apps is not universal.
In some cultures, mentioning dating apps will immediately lead to negative assumptions and connections are done through vetted networks and specific establishments where "hunting" activity is allowed, some with even more boundary pushing that would be impossible in Western culture.
Not sure about what "some cultures" you're talking about, but AFAIK "dating apps" is the #1 answer (or at least in the top 3) to "how did you meet your partner" in many countries. They're not just for hookups. Many even market themselves as being for committed relationships, or have features to facilitate that (eg. filters).
I’d like to start seeing legal jeopardy for companies that are careless with customer information. Make developers scared to retain anything they don’t absolutely need.
Why the downvote? It is just pictures and names. Both disclosed against their will but, and this is the ROTFL part, this is exactly what the ladies did. Uploading pictures and names of unsuspecting male victims and violating their privacy.
if im understanding correctly this was a public bucket? aside from the obvious leaking of data couldnt this also be subject to a DoW (denial of wallet) attack where a user could auto download all the images constantly on a VPS and cause a massive bill?
according to the company this was an old bucket they used prior to 2024 when they moved to a more robust system.
So...they were storing people's information long term in a publically accessible bucket when users did not know. In fact, I believe users were told their IDs/selfies were immediately deleted(not stored), then Tea turned around and says they were legally required to store those photos. Tea had to address this in their press release, apparently.
it should have never been allowed to be published anyway. not trying to justify what is happening, but these kind of apps are historically abused and create more problems than they intentionally try to solve.
"An app was created to help women stay safe on dates and avoid creeps, proceeds to be hacked by creeps"
Not a great look here.
However, Tea could have done a modicum of cybersecurity work (or hired an outside firm) to prevent this. If they are claiming to want to keep women safe (and not just running a gossip board) then this should be a red alert for them.
No public acknowledgement is concerning...
An app that was created to publicly share images and public information of people got the images and public information of the people sharing it exposed.
I don't know how can anyone feel wrong about this without feeling even worse for what was already taking place.
But how would you know your photo or any slander is even on there? From what I heard, the app requires a photo and video based verification through a third party service to determine if you’re a woman (which itself seems problematic). Without that access you wouldn’t even know if your information is on there.
IMO, you don't need individual grievances to shut down that app. A lot of the content has already been leaked - some even by women who don't necessarily agree with the method. And there are a lot of complaints based on them. Many don't even need you to know the background of the men to know that they are toxic and unethical (and probably illegal as well). Cases like 'ghosting after a single date', 'not good in bed', something else equally frivolous or a lot of one-sided narratives. What do all these have to do with 'women's safety', as much as they have to do with men's safety? A lot of men are genuinely weary of dating precisely because of those (I'm talking about men who prefer relationships, not the MGTOW types). This is extremely harmful to the society in general. I believe that these platforms are misusing the 'women's safety' argument to exploit corporate bias in order to circumvent anti-doxxing safeguards and reinforce a very toxic culture.
I get this feeling that you will be downvoted to oblivion on HN if you talk against anything that harms men. Even when it involves technology and is therefore relevant here. Many seem to think that gender equality, justice, sexual violence, etc applies only to one gender. I really would like to know how we reached this situation and their justifications for it.
I would not be disappointed if some actual hacking was done to bring down the entire app. I don't think the Tea app realizes just how many competent people dislike them, and they clearly have very few competent people of their own.
What's the actual violation though? If you click through the "User Generated Content" link, it shows that it's allowed, just that they have to moderate it.
If you look at the API, it is a slop app. The IDs were being uploaded to a public Firebase bucket. Chats are also public now. The full API keys are leaked because they were in the shipped app.
For those who wish for the old days - "Vibe Coding" - shonky websites with shonky security, doxxing on all sides, 4chan pops back into relevance. You get your early internet redo.
The UK and some US states are instituting age verification for adult content. Doxxing thousands of women is a great way to get people talking about privacy and security.
That feels like a hell of a risk to take just to get a conversation started. Not just the obvious implications of endangering all the users, but the cloud that's going to hang over everyone associated with Tea, now.
Random thought: the interesting thing about voting systems where 'disagreement' can align with a downvote: your most interesting comments should be highly upvoted AND downvoted, ultimately hovering around 1.
It means half the people agree, and half disagree, bringing about the most discussion. And, isn't that the point of comments?
I don't expect a particularly strong correlation between "good comment" and "half of people agree". Nor do I think those are going to bring the most discussion. And most discussion is not the point of comments either.
And all those caveats are just for a purely agreement-based voting system. When you add in votes based on quality, comments hovering around 1 are usually iffy.
But that comment and others like it are being heavily downvoted and flagged, more than enough to be killed and to alert us to users who need to be banned.
You've been running this rage-filled campaign against HN for months, the most extreme comments of which I've listed below.
It all seems very pointless; all the comments you were raging against were downvoted and flagged/killed by other users. The comment of yours that you complained was being downvoted actually ended up receiving enough upvotes to return to a positive score.
If you don't want to use HN as intended we'll ban the account, which it seems perhaps is what you want us to do.
However you've also posted some good comments that have received solid numbers of upvotes and good replies, so if you wanted to lean more into the positive contributions, we'd be pleased to see that.
We're well aware there are plenty of objectionable comments on HN; we have to read almost all of them. But the guidelines are clear, and the feedback mechanisms work well when people use them.
Plenty of users play a positive role in keeping HN running well by quietly flagging bad comments and alerting us to bad users via email. We'd appreciate you doing the same.
You should be outraged at any app that allows people to doxx other people online and say unverified things about them. Slander and libel laws still exist on the internet.
So all forms of communication then? What is the end goal here, present your driver's licence and submit your comment to a Truth Verification Panel to be approved for distribution?
Exactly. It's one thing to have Whatsapp used by criminals or whatever, and a totally different thing to go out and make an e2e chat app that's like "hey criminals, use this app to facilitate your drug deals!".
I’ve seen multiple posts online posted by guys showing screenshots. The screenshots would show texts sent to those guys by girls saying that they’ve seen the guys on Tea and that they won’t have any more dates because of what they’ve seen. It all stinks to high heaven.
Is it really so unbelievable that such a thing could have happened? Or that men are unhappy about a giant, unaccountable, anonymous libel machine pointed directly at them?
I think the screenshots are fake because I’ve been using the internet for very long and I know how publicity campaigns work.
For starters, men with hundreds of thousands of followers have no reason to post a screenshot that shows that women have used an app to report them as creeps. That the kind of thing that belongs in a police report, not in a public social network where you’re trying to build your brand.
>men with hundreds of thousands of followers have no reason to post a screenshot that shows that women have used an app to report them as creeps.
lol have you paid attention the conservative man-o-sphere? Victimhood is a major component. That is, quite literally, the brand of most conservative men trying to build an online presence/brand.
1. The people being blamed actually did something wrong and thus want to hide it
2. Everyone is optimizing for likes and branding all the time
3. Someone being blamed for being a creep automatically knows the right thing to do in that situation
Seems reasonable to me that someone could post a legitimate screenshot. (Note this doesn’t imply anything about whether they did something wrong or whether the app is ethical, just that the screenshot could likely be real)
This is such excruciating incompetence by the app developers I'm wondering if it was intentional. Done to punish the women who dared to speak up about vile men.
I just hope they can pursue legal action for this, whether it was a deliberate trap or not.
The trend has been for all things related to sex, dating and relationships to be aggressively male hostile. But I think it's certainly peaked. Off topic, any notice how anti -male bumble is? Trash app.
It is the nature of the user base here. For a group so loud about privacy, users here seem to be very gleeful about these women having their personal information released.
It reveals a chronic and widespread lack of basic empathy.
A women gets assaulted on a date. She warns other women, on a website created for that purpose. Her drivers license, chat history, and passport are then revealed to the open web... and this forum celebrates it, with a giddy glee.
As if all the women on there were lying. As if women must not be permitted to warn each other about predatory men.
I held a faint hope that we were brigaded... Since when do we celebrate this? But clicking through to a few of the users past comments, that hope died.
I've never been quite so disgusted by this forum. This is vile; a stark sign of deep, deep rot in the HN community.
Not to get all conspiratorial, but if I was an incel, or other type of woman-hating-man, with an axe to grind, creating an app to "protect" women and their dirty secrets, then having their data "breached" would be a pretty diabolical revenge plan. Only women can join the app, but the only person running the app is a man? Nothing suspicious about that...
Great suggestion, very practical and well intentioned. On that note, I had another idea; toxic women should stop associating with men. They should take themselves off the dating apps and stop ruining the lives of any men that might be unfortunate enough to pair up with them. My suggestion is just as practical as your suggestion I think. The toxic women can self-identify and voluntarily exclude themselves just as well as the creepy men.
Then they can't complain about how horrible people are. Unfortunately, being a victim is a large part of many people's personalities. This is especially true for the "chronically single" people on dating apps. It's never their fault people don't want to date them! It's everyone else who is horrible.
Years ago when I was on the apps and went on dates it was obvious who these people were. They rarely actually go on dates because every person they match with is a predator to them. Then, if an actual date happened, it would quickly go nowhere because they're treating you as if you're a predator. The whole vibe with these people is awkward and judgmental. Then folks wonder why their dating app experience is bad.
- The fact that this app exists solidifies the data that a small group of men/women do most of the dating on tinder etc while the vast majority land dates far less if none at all.
- This creates distorted market supply and demand where those small group of men/women become sought after and its only human nature in that they value their supply less than the rest.
- Toxic behavior is expected from that small group of highly attractive people that do all the dating.
- It was only a matter of time before such app would run into legal issues or attract angry individuals. Now the damage to the leaked identities will be prolonged. With the AI tech today, the extent to which a damage can be doned with the information from the leaks is unknown.
- As for the company behind Tea, they are done. They face a monumental class action lawsuit as well as ongoing individual civil/criminal cases that will arise from the leaked identities, in particular the photo of driver licenses as well as selfies, usernames, emails drastically increase the surface area for damages.
- The users of this site and those that have directly posted images, details have opened themselves up to significant liability from not only the men they have targeted but from law enforcement.
- We'll see some new laws being formed from this case. Once again, we see the hidden dangers of blindly trusting large popular platforms with sensitive data but the twist with Tea here is the defamation activity that opens up its users to both civil and criminal liability.
> The fact that this app exists solidifies that a small group of men/women do most of the dating on the quick fleeting connections on tinder etc while the vast majority on a few if not none at all.
I don't follow.
> This creates distorted market supply and demand where those small group of men/women become sought after
Isn't that true in the real world as well? I'm not exactly a hunk; people weren't tripping over themselves to ask me out, whereas some of my friends and acquaintances did have to figuratively beat people off with a stick.
I suspect the folks complaining about "markets" in online dating are not the kind of people who can connect offline.
To be fair, I think online dating has gotten worse -- sites like OkCupid used to match you based on shared affinity... the issue there is you could be a very high match on shared values but not someone's "type" visually -- imagine being shown the girl of your dreams only to find out the feeling is not mutual :-)
Conversely, I feel like people sometimes forget that they opted into these interactions, it's not like someone strolled up in a bar and began talking at them.
Anyways... if you're frustrated with apps, I'd suggest doing just that. Talk to people.
I met my last girlfriend at a bus stop. Before that, on a porch -- I was walking by and struck up a convo.
If you can't connect with people organically, no amount of tech can save you.
Freewalled