Marina thought she finally found safety.A lesbian dating app in Brazil — built by queer women, for queer women. Manual verification. No fake profiles. No men.Then everything went wrong.

In September 2025, Sapphos launched as a sanctuary with government-ID checks. Within 48 hours, 40 000 women downloaded it. A week later, a catastrophic flaw exposed the most sensitive data of 17 000 users — IDs, photos, names, birthdays.

One researcher discovered he could see anyone’s profile just by changing a number in a URL.

That’s how fast “safety” can vanish when speed beats security.

What This Episode CoversThis episode of AI Drama investigates how AI-generated code, underqualified devs, and “vibe coding” collided with a vulnerable community.It’s not a takedown of two activists — it’s a warning about asking for extreme trust without professional security.

You’ll LearnHow a single IDOR-style bug leaked government IDs and photosWhy AI-generated code often ships with hidden flawsThe unique threats LGBTQ+ apps face in high-violence regionsWhat happened after the founders deleted evidence of the breachHow to spot red flags before uploading your ID anywhereThe Real StakesBrazil remains one of the most dangerous countries for LGBTQ+ people.Lesbian and bisexual women face three times higher rates of violence than straight women.For many Sapphos users, being outed wasn’t embarrassing — it was life-threatening.

What Went WrongIdentity checks increased trust — but concentrated risk.When one app collects IDs, selfies, and locations, a single bug exposes everything.AI sped up insecure coding. Around 45 % of AI-generated code has vulnerabilities.Basic defenses were missing: no audits, no penetration tests, poor access control.Logs were deleted, erasing evidence victims needed.Communication failed. Instead of transparency, users saw silence and denial.Red Flags Before Trusting an AppVerified security audits (SOC 2 / ISO 27001)Transparent privacy policy and deletion optionsMinimal data collection – no unnecessary IDsPublic security contact or bug-bounty pageTransparent, experienced founding teamAvoid apps promising “100 % secure” or “completely private”Safer HabitsUse unique emails + password managerPrefer apps using privacy-preserving verificationTurn off precise location & strip photo metadataAfter any breach: change credentials, rotate IDs if possible, monitor creditNotable Quotes“Marina’s only ‘mistake’ was trusting people who promised protection.”

“The lesson isn’t don’t build — it’s don’t build insecure. Demand proof, not promises.”

Select Facts

~45 % of AI-generated code shows security flawsLGBTQ+ users face more harassment onlineBrazil records an LGBTQ+ person killed roughly every 48 hoursAI Drama is a narrative-journalism podcast about the human cost when technology fails those who trust it most.Hosted by Malcolm Werchota.

Keywords: dating-app breach • LGBTQ privacy • Brazil • ID verification • AI code security • queer safety

Folgen-ID: 1000732455609

GUID: eb30533f-fd93-4db5-b14d-9a6659636b9a

Erscheinungs­datum: 18.10.2025, 22:13:18