See this is what terrifies me about gating anything behind an X login

That's not a calendly link, it's a malicious x permissions link - it INSTANTLY deep links to the x auth page 

2 taps and your X account is gone with zero context of what's happening 

So many would fall for this before they realized

Mini apps will eat the internet | building /clankermon $clankermon

Clankermon

btw, even if you pay x thousands for gold tick, it takes days for them to give you any support. their biggest mistake is that if your account is taken over, you can't dm premium or the org contact. and then when you  use the form, it just goes to some really terrible folk.

its interesting you got this kinda of crappy email. a lot can also be stolen by literally social engineering your x account (even if you have 2fa on, they will happily disable it).

glad you avoided this particular scam

Not to mention X support is now none existent if you don't pay thousands of $ - even then you see gold tick subscribers have to create a scene on the feed (if they can) to attempt to remedy anything

Farcaster Development Boutique @ dTech.vision 💜 prev pentester & CS at @ ETH Zurich | In love with tech 🤓 decentralization, fitness and oldschool rap 😎

Permissionless easiest to use widely adopted when internet was a safe internal net

Wise 

Especially when anyone can spoof from

Why did we all agree email was a good means of communication again??? 🤣

One reason why I have email set to raw text is to see the links typed out fully 

Practice we had in the IT security firm and I held on to

Artist + Collector | CryptoArt since 2019

Yeah man, it really sucks and protects no one at all. All you can do is jump in a gc and warn others.

it's such bad UX in x dms too, you can't easily see the real domain without replying to the embed like in the screenshot 💀

A lot of folks are falling for that meeting link bs unfortunately. Even those that have been in crypto for a while too. Who’s creating a link sniffing mini app? 😂

Dad, dev • @dune.eth wizard • I'm just zis guy, you know? • cooking progress 🟩⬜️⬜️⬜️⬜️

Wild… I’m guessing you have to approve first, though, right? But they use a fake app name like calendly or something to trick you into thinking it’s for a legit reason based on the DMs?

You granted them whatever permissions they set it up 

They impersonate you to scam your following or you of anything your x account has permission to do from the feed