See this is what terrifies me about gating anything behind an X login

That's not a calendly link, it's a malicious x permissions link - it INSTANTLY deep links to the x auth page 

2 taps and your X account is gone with zero context of what's happening 

So many would fall for this before they realized

Mini apps will eat the internet | building /clankermon $clankermon

Clankermon

Dad, dev • @dune.eth wizard • I'm just zis guy, you know? • cooking progress 🟩⬜️⬜️⬜️⬜️

Ethereum

Yeah there's the x authorize step right after u click that 

Tbh this kind of targeting isn't what I'd be worried about, it's a crypto scammer & a crypto project - way less likely to work, the hit rate must be near zero here

Way more worrisome that someone could make a benign but useful tool that the average person might use but it's just one big social engineering attack on anyone tagged as using a crypto product controlled by an a x account

Wild… I’m guessing you have to approve first, though, right? But they use a fake app name like calendly or something to trick you into thinking it’s for a legit reason based on the DMs?

You granted them whatever permissions they set it up 

They impersonate you to scam your following or you of anything your x account has permission to do from the feed