← Back to context

Comment by hhh

3 days ago

Last time I looked at this company they just dumped your uploads into an unauthenticated gcp bucket. They just ran your photo thru an llm and asked for its location at the time, and the founder was doing something very weird (in my opinion) with scraping Tinder profiles.

https://x.com/i/status/1786030866214326651

Back when GeoSpy was available for everyone to use, I did a test where I just uploaded an image that had a black background and white text saying the location of a place and a textual description.

GeoSpy told me that it was the place mentioned in the picture, with the textual description as evidence.

  • Yes, I have done the same and also used it to prompt inject to give some info about the prompt, but I don’t have that data anymore.

What were the jpgs in tge thotDBSmash folder? Did the founder use that bucket to collect photos of women? Or was that geolocation material, too…

  • You upload photos to tinder, and tinder has rough data on location provided (distance to you) i believe, the photos were the photos people posted on their tinder profile.

Wow — that is probably the most suspicious set of three details ever shared on this forum. Thank you for enlightening us!