TeaOnHer, a rival Tea app for men, is leaking users' personal data
techcrunch.com
techcrunch.com
Not sure what the point of this question is. If what you were supposing had any truth to it, then this is equivalent to wanting humanity to become extinct. I will concede that many people are dim enough that they can't follow through and therefor don't realize that it's equivalent, but there are a minimum number of children that must be born or our species is gone someday (soon).
If you somehow wish to hold the contradictory views that you both are unhappy with and do not want children, and you wish humanity to continue indefinitely, then what this would say is that your some sort of parasite that does not want to contribute your fair share to the continuation of the species. Let someone else do the work, you'll just benefit from it. At minimum, if such people were to be tolerated they must come to understand that they should have little say in policy, especially those policies dealing with the future.
The difference between modern society and the past is women have more power.
One theory is that Millions of years of evolution have conditioned the balance of power to be this way. So women gaining total equal rights is experimental and new in human civilization in general. Such changes in behavior cause unforeseen side effects even if those changes are morally correct. Population growth is one possibility here.
What changed is technology. Technology has enabled women to gain more power. It made life in Mother Nature easier by allowing women to operate on the same level as men. Things like greater strength and speed were no longer relevant because things like manual farming or manual hunting were no longer part of human life.
Once this happens the only barrier was culture and women easily fought for their rights and overcame it.
But the behavioral changes it enables like the tea app or tea on her app or gender wars is something we’ve never seen before.
The population is crashing and lowering and we don’t know why. There is a correlation between how modern a society is and how slow the population is growing. But is it causal?
Is it because women have changed their behavior so much? Although there is a correlation We don’t know for sure.
Qualitatively we do know that women date up. They want to date men who are more powerful and men they respect. But when they have greater choice in getting what they want (no arranged marriages in modern society) and when their own rising power makes the pool of available men who are more powerful than them much smaller… it seems that a possible logical conclusion is that more women will be willingly single and the population will shrink.
So humanity faces a dilemma. Do we go with biology or do we go with what’s morally right? Like if you look at India. The woman still lacks a huge amount of power but the population is expanding. The conditions in which women suffer under are horrible. They lack many freedoms and it’s not morally right. So it’s a hard question not only to answer but to face head on.
There is another freedom modern society enables that fully contributes to the problem as well. This freedom is enabling to both men and women and that is the freedom to fuck without having kids. Birth control. Another experiment in modern society.
China just needs to ban all forms of birth control and abortion and I’m very sure it will solve the population problem. But of course doing so banishes a basic human right that should be morally a universal human right.
I know tons of people disagree with me. And that’s fine. I posted here because I want to hear that disagreement and discuss it. I don’t want to start a gender war and the only way we can avoid that is to take stuff like this impartially. We need the freedom to criticize either gender, men and woman and not take it personally because real negative generalizations of either genders are real and those generalizations may very well be causing general macro impacts to society at large.
... and, worse, we have loonies out there who think that indicates a problem with the "health" of anything.
Additionally the trendline of negative population growth is 0 population. The conclusion of what’s happening is the end of civilization itself. While it may be possible we are oscillating, we can’t know for sure.
I'm not sure you're aware of the criticality of negative population growth that japan/china/korea are all facing.
Thus it is reasonable to say it is unhealthy but it is also reasonable to say that it is possibly natural as unlimited growth also leads to an end.
Can you not call anyone a loonie? It’s this type of attack and personalization that adds barriers to actual critical debate.
If you measure "health" by growth, then you'll get an association between "health" and growth. This means nothing.
You haven't even tried to give any other definition of "health".
> Additionally the trendline of negative population growth is 0 population.
... and any positive growth tends toward infinity. Furthermore any fixed positive growth rate ends with a spherical mass of flesh expanding at the speed of light, and that happens in finite time. After that you have to slow your growth to cubic, though.
Neither projection will actually come true. Neither prediction will come close to coming true.
You can't extrapolate anything forever. Furthermore there are obvious mechanistic reasons to expect the "demographic transaction" to be a bobble that will last at most a few centuries. Suggesting that it'll lead to human extinction is, um, loony.
And you haven't said why zero population would even be a problem. If everybody at every step along the way chooses not to reproduce, that means everybody got what they wanted. Well, OK, you may have not gotten what you want with respect to other people's reproduction, but you know what? That's none of your business.
> I'm not sure you're aware of the criticality of negative population growth that japan/china/korea are all facing.
I'm aware of all the people who think it's critical. I do not find their claims very compelling.
The best they seem to be able to come up with is that there aren't, or won't be, enough young people to do the work to support all the old people. That probably isn't even true, given that it's a global economy, and we're also on track to replace all human labor, long before there's a global population "shortage".
But if it is true, well, who are they that other people should exist to work for them?
Most of the the other reasons for claiming things like that are "critical" tend to come down to nationalism, which is anti-compelling.
> Can you not call anyone a loonie? It’s this type of attack and personalization that adds barriers to actual critical debate.
This was a thread about privacy issues in a phone app. When you drag in your personal obsessions in the context of something totally unrelated, people are going to call you a loony.
The maths works out, but the reality doesn’t.
Extinction is a real phenomenon. There have been many extinctions is your life time. It is directly a physical possibility both from a logical standpoint and an evidence based standpoint point. Like this isn’t just math it’s reality.
People stacked 10 deep is not a physically possible scenario. There aren’t enough resources on earth to sustain that level of population.
Right now we have negative population growth and it is not controlled negative growth. We did not intend for this to happen nor does anyone know how to stop it. So logically speaking; If the background context and status quo remains the same expect this trend to continue past criticality.
Even before that imagine not being able to find a job, product prices rising. Hardships, starvation. Ever watch the movie Children of men?
For example an airline without enough people to hire to maintain a plane, then the plane can no longer fly and everyone associated with the plane no longer has a job.
There's a small period of time where it's easier to find a job but eventually that blows past criticality and the jobs start shrinking faster than available people.
Either way Japan, China and Korea are all in panic mode right now. This is not some speculative issue I'm making up. It's deadly real and there is tons of evidence. Look it up. You're mostly treating it like it is because you're not as informed about the issue.
https://www.cbsnews.com/news/japan-population-decline-60-min...
half of the men in japan are virgins. Entire towns are about to disappear.
We have had so many catastrophic breaches and leaks that I've lost count by now, from Equifax to AT&T to Lastpass. The consequences? at worst, the companies were forced to give people a 5$ credit or discounts and at best a few angry written articles.
Our elected representatives fail to serve the public and punish these corporations.
Mainly because after years and years (and hundreds and hundreds) of data leaks & breaches... every single person would be significantly better off by defaulting to not blindly trusting companies & applications with their data.
>Smaller developers building software benefits users assuming their data is protected
That assumption is simply incorrect. As has been proven literally thousands of times now.
Ideally, apps would be built to purposefully reduce the amount of data collected to the greatest amount possible (and only hold data for the shortest amount of time possible). Rather than now, where they collect as much data as possible, hold on to it forever, and then inevitably leak it.
You shouldn't be trusting your data with anyone, short of NASA, probably (and they won't be asking for it.)
Sure before there would be leaks that would break trust, but generally it seems most of the time the basics were taken care of and often those leaks were because of phishing employees or other means of getting the information vs really basic security issues. Not a hard rule obviously, but still.
Now we have seen time and time again that these vibe coded systems lack even the most basic security fundamentals. That will continue to erode trust.
A few weeks ago, I wanted a walk-tracking app that would show me a map of where I'd been, the distance, not much else (maybe the time it took to walk it). Looks nice, download the first one I find... wants me to register and sign in. Why? This should all remain local on my iPhone. I think I went through 5 of them before I realized they were all junk. It's bad enough that I'd consider a monthly subscription (none were "it costs this much, once" up front), but the idea that I want them data-mining me trying to be a little less fat was absurd to the point of lunacy.
This was all thoroughly broken long before "vibe coding".
> TechCrunch also identified a potential second security issue, in which an email address and plaintext password belonging to the app’s creator, Lampkin, was left exposed on the server
> While the app requests IDs and selfies from its users to verify their identities — a process that is not automatic — users can access a “guest” view of the app without signing in.
Is this just bad development? Are these just things could be missed by any developer or team?
I'm curious as someone who would like to create side projects with users (albiet not dubious ones these like apps) but I'm always afraid of a glaring security flaw that would be basic 101 of web development.
This couldn't be missed by competent developers, in both cases (tea and teaonher incidents). I'm not trying to be harsh, but i wouldn't call such teams competent and i'm fully aware that such bad teams exist. Also with the advent of a.i./vibe coding, people with no qualifications and/or experience in software development are now trying to sell / fake themselves as professional developers which also leads to such catastrophic security situations. You wouldn't hire a barista to build a bridge from a 2-week bridge building bootcamp but a licensed civil engineer, yet in software world this idea doesn't seem out of the order.
As the saying goes, "Human error is not a root cause". A good Five Whys would eventually hit something:
Why did the DL pictures leak? Because the images were accessible via public URL. Why were they accessible that way? Because nobody on the team checked they were not. Why did nobody check?
Maybe not enough red team thinking was employed. It's easy to make an app and say "Look we have a sign-in screen, it's secure", but you need to think from the attacker's perspective and make sure every route to every piece of sensitive data is actually secure.
This is almost "paralyzingly" scary but to not think about it at all is something I cannot fathom from the developers who made these apps.
Doing some more digging into these two "CEOs" of Tea and TeaOnHer. The TeaOnHer CEO is a Criminal Justice graduate from UMD with some comments about using claude.ai and the Tea CEO looks like he took a 6 month coding bootcamp at UC Berkeley. I don't want to dog on their background because I also don't have a CS degree but man...
Not justifying it, but many applications consider the uniqueness of the URL enough protection to prevent discovery.
> Is this just bad development? Are these just things could be missed by any developer or team?
It's not knowing them. And when you vibe-code something, and don't prompt for it, it's not gonna do it.
Yes, that's why it's the #1 most common web security vulnerability in production code:
https://owasp.org/Top10/A01_2021-Broken_Access_Control/
"Permitting viewing or editing someone else's account, by providing its unique identifier (insecure direct object references)"
What vibe coding promoters don't understand is that the average web developer hasn't learned web security 101. Proof: HN commenter points out that "A01:2021 – Broken Access Control" is completely normal in production code.
Interesting that they've gone from reporting about flaws others found to hunting and hacking themselves.
Of course, it's also probably leaking information about the victims of the gossip as well. Shame about that.
Seems to me if this was deliberate that the creator would have gone to greater lengths to protect themselves.
> TeaOnHer, an app designed for men to share photos and information about women they have supposedly dated, has exposed users’ personal information, including government IDs and selfies, TechCrunch can confirm.
> The app, which launched on the Apple App Store earlier this week, is a response to another viral app Tea that allows women to post about the men they date.
It helps the argument that anyone you’d want to meet is not on a dating app.