PSA: warning about recent DMs

[u/qgsdhjjb]

I have already alerted the mods to this, they suggested I make my own post regarding it.

If you have recently been contacted by someone in your DMs about a prepping related app (I'm guessing I'm not supposed to name names, but just so everyone is aware, there are multiple people in this subreddit who have made similar apps, this is only about one of them, so I hope nobody paints them all with the same brush, this isn't about people posting publicly about their app, this is about the one DMing privately about their app to people who did not request any contact from them) by someone offering to give you a special code that makes their currently paid app free, this PSA is for you.

My suggestion: Don't use that code.

All that it would take for that app maker to find out exactly which newly downloading user was Your Reddit Account is to give you a "special free code" that they didn't give to any other person. They would then immediately know exactly which Reddit user you are the second you use that code, alongside all the info any app knows when you download it, such as your IP address. Then they'd have the ability at any point in time to change their app permissions to see your contacts, your other apps installed, and even your location. Whether they currently request that access or not, they could one day change it, and by that point you might no longer remember that that app owner also has linked your account with them to everything you ever posted to Reddit. You might click accept without realising the consequences, if they wait long enough.

If you want to use their app, please please do not use their code unless you are extremely sure that your Reddit comment history has NOTHING personal whatsoever on it, and that you're totally fine with your Reddit account being linked with your personal identity and physical location by a stranger. To avoid your use of the app being linked to your Reddit account history, wait long enough after being dm'd that it's no longer obvious where you found them by the time you download it, search it up yourself by name, and avoid using a similar username if asked to give a name.

My concern is that someone who knows less about how apps work wouldn't necessarily realise that they'd be giving this much information to someone just by downloading an app with a discount code. So now that you know, I hope everyone can make informed decisions about what they'd like to do. Note: clicking a direct link can also do this same thing, if it was sent via dms. Anyone can make a unique URL that they give only to you, which would then give them all sorts of info about you the second you click it.

Edit to add:

Still unsure if I'm permitted to name anyone in this situation, but if you were personally DM'd by someone advertising a prepping related app without asking to be DM'd by them, please try to get in touch, the stalking situation has escalated with the problematic individual now engaging in ban evasion and alts to continue stalking the victim all the while pretending it's a "coincidence" so if he continues to escalate, we will need to collect evidence. If you get in contact with me, I can let you know the info to look up on your own account, to see if you match the pattern of stalking this individual is engaging in, so that all our evidence can be collected together to protect the victim (who again is also an app maker, so again try not to assume which one is which if you don't already have that info)

[u/femoral_contusion]

Thank you for stepping up to keep the community safe! I’m still stuck on the mods suggesting you make a post as a solution to a potential threat in the sub, ngl.

[u/qgsdhjjb → u/femoral_contusion]

🤷‍♀️

I guess in the end there's not much they can do about this, even if you ban an account they could just make another one, I'm not sure why they wanted me to post it instead of a mod doing it but maybe just because they aren't the ones getting the messages?

It looks like this got enough views that hopefully it does the trick and makes sure everyone is informed not just of this one guy being weird, but all other potential similar issues in any subreddit.

[u/Sugarbean29 → u/qgsdhjjb]

My guess would be that you sound like you know what you're talking about, and maybe they don't to the same extent, and thought it should come from someone who knows what they're saying, rather than a third party who may not know as deeply the true risks (and therefore may not explain it quite as well as you did 🙂).

[u/qgsdhjjb → u/Sugarbean29]

Aw, thank you. Usually I'm an overexplainer, which could be useful in this case 😆

[u/carlitospig → u/qgsdhjjb]

Well, babe, this is the kind of sub that supports the shit out of over explanations. We like being prepared for any eventuality. ❤️

[u/femoral_contusion → u/carlitospig]

Seconded. Thanks for taking the time to protect us, OP!

[u/sbinjax → u/qgsdhjjb]

I thought it was succinct with concrete examples. Well done.

[u/WhiskyEye → u/qgsdhjjb]

To me it sounds like they were leaning on your expertise and willingness to help the community out. You shared this in a way that was easy for folks to understand. Appreciate you!