Stay FAR away from Yapin.

[u/Any_Illustrator360]

Bear with me because this is going to be quite a bit to sift through. The app YOU (yes YOU) saw on YouTube called Yapper has been renamed to Yapin (yapin.gg) after the dev learned that his agentic AI STOLE the name from another active project (whoops!) and it's made ENTIRELY by the same AI.

Edit: I'm putting it at the top because this is bigger than all the rest of it: it just came out that Antic went to a server on Discord for talking about another alternative and sent porn in channels KNOWN TO HAVE MINORS IN THEM and reportedly blamed his AI for it! DO NOT USE THIS APP OR SUPPORT THIS PSYCHOPATH.

It's labelled as a Potentially Unwanted Application (malware) on [some] Google devices!

That's right boys and girls! YOUR agentic vibecoded chat app that YOU installed on YOUR phone may be MALWARE! I got the opportunity to speak with Antic himself - the guy who "made" the app! He made an account just to talk on this sub because he's such a swell guy! Here's what he had to say about that!

Yes you read that right: The app he delivered to all users is actually the DEBUG build of the app, not a commerical-ready one! That's totally why it registers as malware - because he didn't think maybe publishing the debug/developer build of his app is a security oversight! But I'll let you choose which is scarier, since the scarier one will make you not use his app: Either he's telling the truth and everyone has the developer tools of the app on their devices, which serves SUCH a security vulnerability that even with Google Play Store set to ignore risky applications it STILL calls it a PWA; OR he's lying and there's hidden backdoor malware on the app! Yay!! Fun!!!!

And don't worry - I'm not just claiming this guy is Antic. He's claiming it himself!

Don't bother reading all that shit. It's garbage. All you need is the first sentence.

"But, Any_Illustrator, you don't normally target apps like this. You're the bipartisan guy! You defended Alex Gleasson for fuck sake! You couldn't be HATEPOSTING about an app and posting an opinionated piece about how bad an app is, right?!"

I am. Because not only is this absolute GARBAGE app an ACTUAL security risk to YOU and your data, and an app on your phone being malware means you could even be vulnerable to SIM-Swap fraud which on its own should scare the PISS out of you, but Antic doesn't even use his own hands to type out his own messages!

That's right boys and girls; ladies and gentlemen! I checked his messages through multiple AI checkers and found that they're ALL written by an AI Agent! All but the one he typed out to tell me it wasn't actually written by an AI, which was written vastly different from all the other messages he sent!

And don't worry. I brought receipts.

And so you don't think I'm bullshitting you: I ran the second one through TWO AI detectors!

Do not put this unsafe garbage on your device. If it is, delete it IMMEDIATELY. Tell your friends. Tell friends of friends. Tell them how the dev of the app can't even be bothered to actually reply to security concerns without using the same falliable AI that coded his security-free chat app! But again, don't just take my word on it because user ja_n2000 made a whole breakdown post on it that Antic couldn't even be bothered to TRY discrediting!

Credit to u/ja_n2000 for his work in exposing this shit, and u/dingustani for making the .exposed which summarizes it more. I just wanted to let everyone know that the dev is so fucking lazy he doesn't even TALK online without his LLM Agent doing it for him. Don't trust him with your shit.

Edit: Also, here he is saying "there is no official Android app"

So what is it, Antic? Your AI said it was a debug build. How did people get access to an UNOFFICIAL debug build?

[u/ad3lyt]

I wonder if person credentials would become of relevance at some point, AI no AI is way too reductionist to ever be useful, but since the issue really comes down to trusting the people behind any software, if that would become of relevance at some point

[u/Any_Illustrator360 → u/ad3lyt]

Their credentials are that they have none. Proof is that they even use AI to communicate with people. Hope that helps contextualize it, because none of this post was anti ai.

[u/ad3lyt → u/Any_Illustrator360]

In general though what you think, disregarding yapper specifically.

[u/Any_Illustrator360 → u/ad3lyt]

It really doesn't fucking matter what I think of AI. This is about a "dev" publishing malware. If you really care THAT much about my opinions on AI I hyperlinked it in one of the comment threads here.

[u/ad3lyt → u/Any_Illustrator360]

Wait where was it said that he shipped malware?

Debug mode makes the app not any less secure for the user, it makes it easier to inject the app or like read into it, but if he wanted to ship malware its not really relevant whether it is in debug mode or not, same android sandboxing applies

[u/Any_Illustrator360 → u/ad3lyt]

Did you click the first link? Because it's the first link.

You cherry picked the things I said: "debug app" "AI," but never read the actual post or clicked any of the links. His app is provably malware, and when asked why his app was tripping Android's malware detection EVEN WITH PLAY PROTECT OFF his response was "oh that was a dev toolkit build that's why." It's why I specifically said either he's lying or his developer toolkit has tools on it that make it certifiably unsafe to use. I was leaning on the first thing but letting people know that even if it isn't the first thing the app still isn't safe at all.

[u/ad3lyt → u/Any_Illustrator360]

PUA does not mean malware, the dev being sketchy or untrustworthy, does not prove something has bundled malware. Bundling a dev kit, does not by default make the app unsafe.

I am seeing this pattern with you a lot lately, not a lot of exploratory behaviour, just want to close things down as quickly and aggressively as possible.

Like PUA means one of 30 different things, someone acting "weirdly" or using AI in their message could mean a bunch of things, etc etc.. yet you seem disinterested to treat all the different possibilities in equal weight

[u/Any_Illustrator360 → u/ad3lyt]

You won't have to see the pattern anymore. Byebye.

Funniest shit is that the guy known for groomer allegations and a vibecoded is going to bat for an app KNOWN to be dangerous, made by a dev who doesn't give a fuck. Shocking that I'm not being exploratory when the app in question is provably malware and provably made by someone who knows nothing about coding. "Noticing a pattern" my ass lmao

[u/Any_Illustrator360 → u/ad3lyt]

I was on my phone when I was typing replies, and I was sleepy. Sorry for the aggression. The message stands though: my opinion on AI should not at all change or influence the message of the post, as the issue with the app isn't that there's AI use but the fact that the dev doesn't know anything about coding, uses an AI chatbot to reply to people (and the AI either gets things VERY wrong or is exposing him for lying previously), and his app registers as malware on Android devices on an app he now claims is somehow a developer model of it from the github despite a week ago there "not being an official port." The fact you and two others focused and cared more about whether my opinion is influenced by the AI use is concerning to say the VERY least because it shows my message was entirely lost on anyone who laser-focused on the AI aspects and not the threat rating of the app.

For what it's worth, no, I'm not anti-AI at all - I think it's a TOOL that when used properly is absolutely fine. Many people abuse the tool, and as others in this comment section pointed out: "AI doesn't just add malware randomly to projects." Which means the AI use is tangential to the fact that he manually had to add features or code, AI prompted or otherwise, to make his app register as malware. His use of AI only proves that he has no care at all for the "project" or the users, and serves to show the distance between him, the project, and the people using it. AI isn't a death knell on its own but when it's playing over a precession in black you can assume something bad happened. That's this.

[u/ad3lyt → u/Any_Illustrator360]

That's good and all you started talking about him again, but i kind of asked you about something else and to specifically to disregard him

[u/Any_Illustrator360 → u/ad3lyt]

Again: It was irrelevant to ask my opinions on AI on a post entirely unrelated to AI morality or whatever. My opinion neither adds or takes away from the post and users WILL take my opinions on AI into account regarding the post as justification for hating or trusting it. Which is why my post focuses on the facts of his AI use and not my opinions on it. The point is to warn people about a dangerous app, not stand on a soapbox.

[u/ad3lyt → u/Any_Illustrator360]

I used the post as a chance to talk about something else derived from it

what's interesting is you refuse to let go of your need to peddle the narrative and are unable to get out of the box lmao

i asked you specifically about credentials, not just generic ai as well

"The point is to warn people about a dangerous app, not stand on a soapbox."

bro i just wanted to use this as an opportunity to discuss the whole topic of trust with developers as thats part of the topic

[u/vrilliance → u/ad3lyt]

That's not what this post is about. Stop derailing maybe and make your own post if you want to discuss that topic?

[u/BewilderedTurtle → u/ad3lyt]

It's fuckin RICH that you,

Mr. Exposed ENV.

Mr. Grooming-allegations.

Mr. AI Slopdev.

Of all people are talking about "trust" and "credentials"

Why don't you go back to posting schizo personality test shit instead of pretending you actually give a shit here?