{"id":35327,"date":"2025-07-27T15:01:45","date_gmt":"2025-07-27T15:01:45","guid":{"rendered":"https:\/\/www.duck9.com\/blog\/?p=35327"},"modified":"2025-07-27T11:02:18","modified_gmt":"2025-07-27T15:02:18","slug":"tea-app-is-a-sequel-to-the-dating-report","status":"publish","type":"post","link":"https:\/\/www.duck9.com\/blog\/tea-app-is-a-sequel-to-the-dating-report\/","title":{"rendered":"Tea App is a Sequel to The Dating Report"},"content":{"rendered":"
\n
\n
Dating Reports<\/div>\n
\"image0.png\"<\/p>\n

<\/p>\n\n\n\n\n
 <\/td>\n<\/tr>\n
 <\/td>\n\n\n\n\n
<\/a><\/td>\n<\/td>\n\n\n\n\n\n\n\n\n\n\n
SENTRY<\/a><\/b><\/td>\n<\/tr>\n
\u2066\u202a@sentryXliberty\u202c\u2069<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n<\/td>\n<\/tr>\n
<\/td>\n<\/tr>\n
\u2066\u202a@ZTobias114838\u202c\u2069<\/a> 1. download app to humiliate men
2. upload licence id since this serious app requires identity verification
3. vibe coded app gets hacked
4. get exposed as the massive whale you are<\/td>\n<\/tr>\n
 <\/td>\n<\/tr>\n
7\/25\/25, 3:02\u202fPM<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n <\/td>\n<\/tr>\n
 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/a><\/div>\n

\"image1.png\"
<\/p>\n

\n

<\/span><\/span><\/div>\n
\n
Placing this here so people have a rundown:<\/div>\n
1) Tea app hosts all non code assets (ui images, customer uploads, messages) in a public cloud bucket that anyone with a browser can access without a password<\/div>\n
<\/div>\n
2) some guy finds it and posts it to 4chan yesterday morning<\/div>\n
<\/div>\n
3) turns out there are thousands of womens drivers licenses in there<\/div>\n
\"image2.jpeg\"<\/div>\n
4) within minutes,  the licenses are scanned (probably with a vision model) for addresses and map pins are created that link to the UUID of the images in the dataset, thereby doxxing thousands of women<\/div>\n
<\/div>\n
The pins are not geos… they’re home addresses which is kind of worse<\/div>\n
\"image3.png\"<\/div>\n
The moral of the story is security is job one. Both the customers and the company did dumb things and now there’s going to be massive fallout\"image4.jpeg\"<\/div>\n

<\/p>\n\n\n\n\n
 <\/td>\n<\/tr>\n
 <\/td>\n\n\n\n\n
\"s0QWtaQT_normal.jpg\"<\/a><\/td>\n<\/td>\n\n\n\n\n\n\n\n\n\n\n
genddy<\/a><\/b><\/td>\n<\/tr>\n
\u2066\u202a@ZTobias114838\u202c\u2069<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n<\/td>\n<\/tr>\n
<\/td>\n<\/tr>\n
The drivers licenses leaked today from the tea app have been uploaded to a searchable map…. this may be the worst PII leak I’ve ever seen lol pic.x.com\/qz2lzJreYa<\/a><\/td>\n<\/tr>\n
 <\/td>\n<\/tr>\n
7\/25\/25, 11:24\u202fAM<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/td>\n <\/td>\n<\/tr>\n
 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/a><\/div>\n

https:\/\/x.com\/superSaiyanSkai\/status\/1941392367304761636\/video\/1<\/a><\/div>\n

<\/p>\n


<\/span><\/span><\/div>\n
Larry Chiang<\/span><\/span><\/div>\n
Fund of Founders<\/div>\n
Founding Stanford EIR<\/div>\n
@duck9 alum, Deeply Understood Capital Credit Chinese Knowledge 9<\/div>\n
Solo Founder Uber API<\/div>\n
650-566-9600 Office<\/div>\n
650-566-9696 Direct<\/span><\/div>\n
Cell: 415-720-8500 <\/span><\/div>\n
650-283-8008 (cell)\"image5.jpeg\"<\/span><\/div>\n

<\/span><\/span><\/div>\n

9:59<\/span><\/span> video sums up 14 chapters of a book coming out 11-11-2039 “What They Will NEVER Teach You at Stanford Business School”<\/span>
http:\/\/www.youtube.com\/watch?v=ejeIz4EhoJ0<\/span><\/p>\n


Fashion Week’s front row
http:\/\/www.youtube.com\/watch?v=QXIaNZi3mHQ<\/span><\/span><\/div>\n

What A Super Model Can Teach a Harvard MBA About Credit www.slideshare.net\/larrychiang\/what-a-super-model-can-teach-a-harvard-mba-about-credit<\/a><\/span><\/p>\n

American Express hosts me mentoring you about FICO scores at New York Fashion Week
t.co\/inxTmZAj<\/a><\/span><\/p>\n

My video boils down 20,000 hours and moves you to the right on the entrepreneur bell curve 
http:\/\/www.youtube.com\/watch?v=eudADPfTWiE<\/span>
<\/span>****************<\/span><\/div>\n

Editor of the widely syndicated “What They Don’t Teach at School”
whattheydontteachyouatstanfordbusinessschool.com\/blog<\/a><\/span><\/p>\n

CNN Video Channel: ireport.cnn.com\/people\/larrychiang<\/a><\/span><\/p>\n

Read my last 10 X posts at www.X.com\/LarryChiang<\/a><\/span><\/p>\n

Author of #WTDTYASBS a NY Times Bestseller released 09-09-09 at #NYFW on a runway under the tents
whattheydontteachyouatstanfordbusinessschool.com\/blog\/?s=Ny+times+bestseller<\/a><\/span><\/p>\n

www.fastcompany.com\/embed\/c0d4562ea2049<\/a><\/span><\/p>\n

52 Cards. Two Jokers. What They DO Teach You at Stanford Engineering
http:\/\/www.youtube.com\/watch?v=vDBY0GkI3-g<\/span><\/p>\n

Emergency swings and cutting deals as an 9 year old
http:\/\/www.youtube.com\/watch?v=OFGY7v9C4G0<\/span><\/p>\n

Hunter Pence shared thoughts before winning WORLD SERIES’ Game #7
http:\/\/www.youtube.com\/watch?v=usu0luYy9pw<\/span><\/span><\/p>\n


<\/span><\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Dating Reports     SENTRY \u2066\u202a@sentryXliberty\u202c\u2069 \u2066\u202a@ZTobias114838\u202c\u2069 1. download app to humiliate men2. upload licence id since this serious app requires identity verification3. vibe coded app gets hacked4. get exposed as the massive whale you are   7\/25\/25, 3:02\u202fPM     Placing this here so people have a rundown: 1) Tea app hosts all non […]<\/p>\n","protected":false},"author":1,"featured_media":35328,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35327","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/posts\/35327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/comments?post=35327"}],"version-history":[{"count":0,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/posts\/35327\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/media\/35328"}],"wp:attachment":[{"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/media?parent=35327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/categories?post=35327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.duck9.com\/blog\/wp-json\/wp\/v2\/tags?post=35327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}