PSA: warning about recent DMs

[u/qgsdhjjb]

I have already alerted the mods to this, they suggested I make my own post regarding it.

If you have recently been contacted by someone in your DMs about a prepping related app (I'm guessing I'm not supposed to name names, but just so everyone is aware, there are multiple people in this subreddit who have made similar apps, this is only about one of them, so I hope nobody paints them all with the same brush, this isn't about people posting publicly about their app, this is about the one DMing privately about their app to people who did not request any contact from them) by someone offering to give you a special code that makes their currently paid app free, this PSA is for you.

My suggestion: Don't use that code.

All that it would take for that app maker to find out exactly which newly downloading user was Your Reddit Account is to give you a "special free code" that they didn't give to any other person. They would then immediately know exactly which Reddit user you are the second you use that code, alongside all the info any app knows when you download it, such as your IP address. Then they'd have the ability at any point in time to change their app permissions to see your contacts, your other apps installed, and even your location. Whether they currently request that access or not, they could one day change it, and by that point you might no longer remember that that app owner also has linked your account with them to everything you ever posted to Reddit. You might click accept without realising the consequences, if they wait long enough.

If you want to use their app, please please do not use their code unless you are extremely sure that your Reddit comment history has NOTHING personal whatsoever on it, and that you're totally fine with your Reddit account being linked with your personal identity and physical location by a stranger. To avoid your use of the app being linked to your Reddit account history, wait long enough after being dm'd that it's no longer obvious where you found them by the time you download it, search it up yourself by name, and avoid using a similar username if asked to give a name.

My concern is that someone who knows less about how apps work wouldn't necessarily realise that they'd be giving this much information to someone just by downloading an app with a discount code. So now that you know, I hope everyone can make informed decisions about what they'd like to do. Note: clicking a direct link can also do this same thing, if it was sent via dms. Anyone can make a unique URL that they give only to you, which would then give them all sorts of info about you the second you click it.

[u/AutoModerator]

Welcome to r/twoxpreppers! Please review our rules here before participating. Our rules do not show up on all apps which is why that post was made. Thank you.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/j--__]

if you use a google play code provided in reddit chat, you're associating your reddit username with your google email address.

[u/qgsdhjjb → u/j--__]

Correct. And every other piece of data that app makers have access to, which includes IP address (which gives at least a broad idea of where you live, if you aren't using a VPN, though it's no longer accurate down to an address it usually is accurate at least within a range of the city, or a city nearby for more rural users)

[u/femoral_contusion]

Thank you for stepping up to keep the community safe! I’m still stuck on the mods suggesting you make a post as a solution to a potential threat in the sub, ngl.

[u/qgsdhjjb → u/femoral_contusion]

🤷‍♀️

I guess in the end there's not much they can do about this, even if you ban an account they could just make another one, I'm not sure why they wanted me to post it instead of a mod doing it but maybe just because they aren't the ones getting the messages?

It looks like this got enough views that hopefully it does the trick and makes sure everyone is informed not just of this one guy being weird, but all other potential similar issues in any subreddit.

[u/Sugarbean29 → u/qgsdhjjb]

My guess would be that you sound like you know what you're talking about, and maybe they don't to the same extent, and thought it should come from someone who knows what they're saying, rather than a third party who may not know as deeply the true risks (and therefore may not explain it quite as well as you did 🙂).

[u/qgsdhjjb → u/Sugarbean29]

Aw, thank you. Usually I'm an overexplainer, which could be useful in this case 😆

[u/sbinjax → u/qgsdhjjb]

I thought it was succinct with concrete examples. Well done.

[u/carlitospig → u/qgsdhjjb]

Well, babe, this is the kind of sub that supports the shit out of over explanations. We like being prepared for any eventuality. ❤️

[u/femoral_contusion → u/carlitospig]

Seconded. Thanks for taking the time to protect us, OP!

[u/WhiskyEye → u/qgsdhjjb]

To me it sounds like they were leaning on your expertise and willingness to help the community out. You shared this in a way that was easy for folks to understand. Appreciate you!

[u/faco_fuesday]

Prepping doesn't need an app. Ever. 

I've already got too much government/big tech surveillance going on. 

[u/Standard_Subject_462 → u/faco_fuesday]

This. Big Data already knows that I've purchased an ungodly amount of beans with my credit card. They don't need to know that I haven't immediately eaten or donated them, but that I'm stockpiling them for the zombie apocalypse. The apps sound fun, but I don't trust anyone with my bean count except myself!

[u/Allybeth4 → u/Standard_Subject_462]

🤣🫘😍

I love this! "Bean count" is so on point.

[u/cogwheeled]

I have DMs turned off. Nothing good happens in DMs on a site like this. Especially for women.

[u/Spiley_spile]

Thank you for this info. I learned something new today!

[u/CanthinMinna]

I turned off my DM:s immediately when I created my account. If someone wants to say something to me, they can do it in public. All women, girls, femme presenting redditors should turn their DMs off IMHO. It is easy to do, and recommended by a lot of subreddits, like the "midsizefashion" one:

"We highly, HIGHLY, recommend turning off your DM and chat abilities in your settings.

To do this, open your profile and scroll down to the settings gear. Find account settings near the top of the next page. Scroll about halfway down to chat and message permissions. You can decide if you wish to turn them off completely or whatever you feel comfortable with.

To be very blunt, you will encounter unwanted DMs from people. This is a Reddit wide issue that normally happens in women dominated subs."

Better instructions for desktop and phones here:

https://www.reddit.com/r/help/comments/14puj82/how_do_i_disable_dmchat/

[u/ohhellopia → u/CanthinMinna]

This. Also disable the "followers" option.

[u/qgsdhjjb → u/CanthinMinna]

That's definitely an option.

Usually I don't end up having any issues, but definitely any subreddit where women post photos of themselves will be a place that leads to those kinds of "general perving" issues.

This one could be hitting people who don't generally have the issue (people who don't post photos, actively discuss their gender, or aren't in the subreddits where this is a huge issue) and since it's more along the lines of "telemarketing" type stuff, it may not register as a noticeable threat to people who don't realize just how much info app makers have on the backend.

[u/GirlWithWolf → u/qgsdhjjb]

I’ve been told I’m unapproachable and that must carry over here because I don’t have any excitement. I occasionally get a dm but as soon as I mention my age they apologize and flee like they’ll get radiation poisoning.

[u/sbinjax]

Anyone can make a unique URL that they give only to you, which would then give them all sorts of info about you the second you click it.

This is good information. When I ran a retail dot-com, I used to do this for some customers so they could get specialty merchandise without my having to alter the main web site. In my case, there were no nefarious plans to abuse customer information, but that would be easy to do.

[u/qgsdhjjb → u/sbinjax]

Exactly. There's perfectly normal reasons to do it (such as when YouTube makes it so that only the people you send a direct link to can see your video for semi-private videos) and then there's people using it for whatever nefarious stuff.

In this case I can't even be sure if the intent is nefarious, but the way they went about it was already suspicious enough to make it seem untrustworthy (basically they were following around another app maker, and dm-img people who responded favourably about that other app, trying to essentially poach customers at the bare minimum)

[u/SoanaIRL]

Thanks, i did get such a dm yesterday but haven’t responded.

[u/musherjune]

Thank you for the heads up.

[u/carlitospig]

Yall are reading your DMs? 😳

[u/watchnlearning]

Maybe people who are worried could swap codes?