3 ms·
There is certainly ‘actual’ evidence linked in the reddit post. I’ve never seen the thread before, looks like they have edited/ added information. Here’s a repo
by 40four 6y ago
There is certainly ‘actual’ evidence linked in the reddit post. I’ve never seen the thread before, looks like they have edited/ added information. Here’s a report from cyber security researchers
https://penetrum.com/research https://penetrum.com/research
https://penetrum.com/tiktok/Penetrum_TikTok_Security_Analysis_whitepaper.pdf https://penetrum.com/tiktok/Penetrum_TikTok_Security_Analysi...
https://penetrum.com/tiktok/tiktok_15.2.3_static_analysis.pdf https://penetrum.com/tiktok/tiktok_15.2.3_static_analysis.pd...
Things they found
- Excessive data collection
- Privacy policies that allow distribution of said data
- Execution of OS commands
- Insecure cryptography usage
- Potential SQL injection code from user defined variables
- Storing of API tokens
- Webview enabled by default along with insecure webview enabled
- App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
- Files may contain hardcoded informations like usernames, passwords, keys etc.