5 ms·

Go to their Privacy Policy page: https://www.tiktok.com/legal/privacy-policy-us?lang=en https://www.tiktok.com/legal/privacy-policy-us?lang=en Click on "What i

Go to their Privacy Policy page: https://www.tiktok.com/legal/privacy-policy-us?lang=en https://www.tiktok.com/legal/privacy-policy-us?lang=en Click on "What information do we collect?" Scroll down to the section "Information we collect automatically " and the sub-section "Device Information". This is what it says: Device Information We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, device IDs, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices. Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices. We may also associate you with information collected from devices other than those you use to log-in to the Platform. One of the listed items is "app and file names".

CommitSyn 4y ago
Does that mean they can collect all the filenames on the device? Personally I'd be more worried about these: "keystroke patterns or rhythms" and "Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices. We may also associate you with information collected from devices other than those you use to log-in to the Platform."
- GekkePrutser 4y ago
  Indeed those things are even more worrying
EastSmith 4y ago
> keystroke patterns or rhyth Well this is something new to me. I understand how this can provide entropy, just I had not realized we are there yet. Edit: Quick search gave this - "Understanding users' keystroke patterns for computer access security". So it can be a security measure too. https://www.sciencedirect.com/science/article/pii/S0167404803000105 https://www.sciencedirect.com/science/article/pii/S016740480...
- ec109685 4y ago
  No, it’s likely to determine if you are a human or bot. Maybe also a proxy for age?
  - moralestapia 4y ago
    Do you work there? Otherwise, how could you be so sure about this?
- jeroenhd 4y ago
  It can be a mechanism to detect bots, for sure. Many app platforms have serious trouble with people just hanging hundreds of phones on a wall with an auto clicker for ad fraud or other nefarious purposes. Being able to detect and shadow ban them would be a good way to use this technology. I don't think keystroke patterns will be similar enough across devices to properly detect and track users, though they can certainly make an attempt. They'll be able to detect users on shared devices but I don't that adding much value to their tracking.
- eurasiantiger 4y ago
  If they collect accelerometer data in the background, the dataset can be used to infer what users type in other applications.
- Terretta 4y ago
  I have a vaguely reconstructed memory dating to the 80s of Michael Chrichton invented (related?) AppleSoft Basic code that considered intra-key delay on password entry as biometric validation it was entered by the right party.

CommitSyn 4y ago

Does that mean they can collect all the filenames on the device? Personally I'd be more worried about these: "keystroke patterns or rhythms" and "Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices. We may also associate you with information collected from devices other than those you use to log-in to the Platform."

GekkePrutser 4y ago
Indeed those things are even more worrying

EastSmith 4y ago

> keystroke patterns or rhyth Well this is something new to me. I understand how this can provide entropy, just I had not realized we are there yet. Edit: Quick search gave this - "Understanding users' keystroke patterns for computer access security". So it can be a security measure too. https://www.sciencedirect.com/science/article/pii/S0167404803000105 https://www.sciencedirect.com/science/article/pii/S016740480...

ec109685 4y ago
No, it’s likely to determine if you are a human or bot. Maybe also a proxy for age?
- moralestapia 4y ago
  Do you work there? Otherwise, how could you be so sure about this?
jeroenhd 4y ago
It can be a mechanism to detect bots, for sure. Many app platforms have serious trouble with people just hanging hundreds of phones on a wall with an auto clicker for ad fraud or other nefarious purposes. Being able to detect and shadow ban them would be a good way to use this technology. I don't think keystroke patterns will be similar enough across devices to properly detect and track users, though they can certainly make an attempt. They'll be able to detect users on shared devices but I don't that adding much value to their tracking.
eurasiantiger 4y ago
If they collect accelerometer data in the background, the dataset can be used to infer what users type in other applications.
Terretta 4y ago
I have a vaguely reconstructed memory dating to the 80s of Michael Chrichton invented (related?) AppleSoft Basic code that considered intra-key delay on password entry as biometric validation it was entered by the right party.