5 ms·

So, I completely understand that gov's are concerned about an application on gov. devices being used to profile their staff. There's been plenty written about p

So, I completely understand that gov's are concerned about an application on gov. devices being used to profile their staff. There's been plenty written about profiling people based on app. usage. The bit that somewhat surprises me is the focus on TikTok, other apps are (AFAIK) capable of the exact same thing. Is the expectation that TikTok is the only app that the Chinese government have access to? this seems a bit unlikely. And of course this doesn't touch on the companies that provide ad networks and other services to mobile applications, who have the ability to pull info from multiple apps at the same time, I've not seen any movement on banning those similarly.

kube-system 4y ago
Likely because of a combination of factors: install base + privacy concerns + governance concerns Missing one of those factors would make something much less of a threat in practice
bitcurious 4y ago
If you’re on TikTok, you’re by default granting camera, microphone, and location permissions. If you’re addicted to TikTok you’re probably opening it up every time you have a few minutes to kill, including in government offices and etc.
- Spivak 4y ago
  No you're not, what? Is this some Android nonsense because I can just deny all of that on iOS. It doesn't even have the option of requesting location permission. If you want to make a Tiktok then yeah it's gonna need the camera and mic but outside of that it has never once triggered the mic or camera indicator while not taking a video.
  - TheFragenTaken 4y ago
    It's not Android nonsense, it's just nonsense. If you don't post, TikTok requires zero permissions. Further, they only collect data related to how you use the app as per their privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en https://www.tiktok.com/legal/page/eea/privacy-policy/en.
    - kube-system 4y ago
      > they only collect data related to how you use the app Did you read it? Because that is not what it says. That page also explains how they: * fingerprint your device, and your biometrics, and ID your device even when you don't log in * collect your location information even if you deny OS permissions * collect information about your viewing habits * collect and share information from data brokers * share information with foreign companies in their corporate group, and comply with all legal requests. (and there's a link for more detail that returns a 404)
      - snehk 4y ago
        That's fairly normal data collection and nothing out of the ordinary at all.
        kube-system 4y ago
        It is. The new part for most westerners is the political jurisdiction that those legal requests are beholden to.
        Spivak 4y ago
        Which I guess is "welcome to how everyone not in the US thinks about the US." So 100% it's a change for us but the rest of the world seems to have acclimated to it fine-ish.
        kube-system 4y ago
        I don't disagree with that sentiment. Although it is more understandable that many outside of the US/CN/RU might use foreign social networks, because they don't have any major domestic alternatives... whereas the US has several direct competitors to TikTok.
      - TheFragenTaken 4y ago
        What you list is exactly what I am saying. Moreover you are conjecturing by saying "deny OS permissions". Simply put, an app cannot do something that would require permissions, without it (unless exploiting vulns). Do you perhaps mean IP location? Which is incomplete, can be spoofed, or manipulated. I agree that no app should probably have this power, but what the original commenter posits, is that TikTok is overreaching. Where "over" is compared to everyone else (including western media). Even, most websites collect this information with or without consent.
  - deleted 4y ago
    [deleted]
rvz 4y ago
> The bit that somewhat surprises me is the focus on TikTok, other apps are (AFAIK) capable of the exact same thing. Is the expectation that TikTok is the only app that the Chinese government have access to? this seems a bit unlikely. I don't think it is just about 'profiling people based on app usage'. I have not seen any other social networking app that does this [0] and after suggesting that ByteDance having no access to US data outside of China, well there's this investigation. [1] [2] > I've not seen any movement on banning those similarly. That's because they (Facebook, Instagram, Snap, etc) have instead been fined by the regulators in the hundreds of millions. Don't want a ban? Pay a giant fine for such privacy violations like the rest of the social networking companies have done. [0] https://futurism.com/tiktok-spy-locations-specific-americans https://futurism.com/tiktok-spy-locations-specific-americans [1] https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-tapes-us-user-data-china-bytedance-access https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-... [2] https://www.forbes.com/sites/emilybaker-white/2022/12/22/tiktok-tracks-forbes-journalists-bytedance/?sh=28eee5eb7da5 https://www.forbes.com/sites/emilybaker-white/2022/12/22/tik...
honkler 4y ago
because china. There's no other reason besides this. American empire and its vassal states (like canada) are feeling threatened by the rise of the east.
- cscurmudgeon 4y ago
  Don’t understand this reasoning at all. China bans all Western social media tech in the widest way possible for more than a decade and the minute a Western govt enacts a ban on govt devices, folks say this is unfair.
  - snehk 4y ago
    Companies like Google and Facebook CHOOSE to not operate in China because they don't want to follow the the laws that Chinese companies are following. They're not banned, they're not allowed to operate unless they comply with local laws. Just like they wouldn't be allowed to operate in Europe if they didn't show a Cookie pop-up. It's not like they're not allowed to operate in China because they're American apps. The US should make the data collection itself illegal for everyone and be done with it. They're currently walking this weird path where the exact same data collection is fine if it's Americans doing. It's not one set of rules for everyone.
    - cscurmudgeon 4y ago
      False https://www.investopedia.com/articles/investing/042915/why-facebook-banned-china.asp https://www.investopedia.com/articles/investing/042915/why-f... Any source to backup your claim? > The US should make the data collection itself illegal for everyone and be done with it. They're currently walking this weird path where the exact same data collection is fine if it's Americans doing. It's not one set of rules for everyone. Data collection is NOT the issue. Foreign govt interference is the issue. If tomorrow Google were controlled by a hostile foreign govt., they would face the same bans.
      - snehk 4y ago
        But your link (the NYT times) says exactly what I said. They don't comply with local laws, which is why they're not accessible there. Not sure what else to tell you. Even Facebook's official comment is, which can be found if you follow the links you've posted: “We need to figure out a solution that is in line with our principles and what we want to do, and in line with the laws there, or else it’s not going to happen. Right now, there isn’t an intersection.” > Foreign govt interference is the issue. If tomorrow Google were controlled by a hostile foreign govt., they would face the same bans. So it _is_ simply because it's foreign. How long do you think Google would survive in the US if it didn't comply with US requests? It does comply with requests and three letter agencies have access to data (as per Edward Snowden). If your stance is that it's fine when we do it but not when others do it then that's just what it is.
alewi481 4y ago
Good point. I believe Opera Ltd., the company that develops the Opera web browser, was bought out by a Chinese company a few years ago. I would figure that the amount of browser data that could potentially be exfiltrated would be a major concern as well.
theropost 4y ago
Good point, I think most policy makers are not versed in how IT, and software works enough to understand the implications of such things. Tik Tok is an easy target, and gives them a starting point, but overall, the lack of true understanding of technology by our policy makers is quite astounding, and perhaps troubling at the same time.
Tarean 4y ago
TikTok did use ip tracking of reporters working on a story to try to find whistleblowers. According to TikTok that was a misguided employee who was let go shortly after. Though they are hardly alone in the 'misguided employees' department. Ebay had a whole scheme where they flew out a security team to harass and stalk a couple that had criticized ebay in a blog post. https://www.npr.org/2022/09/30/1126078948/live-spiders-and-cockroaches-ex-ebay-executives-get-prison-time-in-harassment-pl https://www.npr.org/2022/09/30/1126078948/live-spiders-and-c... I think Facebook and Uber had their own location tracking scandals as well.

kube-system 4y ago

Likely because of a combination of factors: install base + privacy concerns + governance concerns Missing one of those factors would make something much less of a threat in practice

bitcurious 4y ago

If you’re on TikTok, you’re by default granting camera, microphone, and location permissions. If you’re addicted to TikTok you’re probably opening it up every time you have a few minutes to kill, including in government offices and etc.

Spivak 4y ago
No you're not, what? Is this some Android nonsense because I can just deny all of that on iOS. It doesn't even have the option of requesting location permission. If you want to make a Tiktok then yeah it's gonna need the camera and mic but outside of that it has never once triggered the mic or camera indicator while not taking a video.
- TheFragenTaken 4y ago
  It's not Android nonsense, it's just nonsense. If you don't post, TikTok requires zero permissions. Further, they only collect data related to how you use the app as per their privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en https://www.tiktok.com/legal/page/eea/privacy-policy/en.
  - kube-system 4y ago
    > they only collect data related to how you use the app Did you read it? Because that is not what it says. That page also explains how they: * fingerprint your device, and your biometrics, and ID your device even when you don't log in * collect your location information even if you deny OS permissions * collect information about your viewing habits * collect and share information from data brokers * share information with foreign companies in their corporate group, and comply with all legal requests. (and there's a link for more detail that returns a 404)
    - snehk 4y ago
      That's fairly normal data collection and nothing out of the ordinary at all.
      - kube-system 4y ago
        It is. The new part for most westerners is the political jurisdiction that those legal requests are beholden to.
        Spivak 4y ago
        Which I guess is "welcome to how everyone not in the US thinks about the US." So 100% it's a change for us but the rest of the world seems to have acclimated to it fine-ish.
        kube-system 4y ago
        I don't disagree with that sentiment. Although it is more understandable that many outside of the US/CN/RU might use foreign social networks, because they don't have any major domestic alternatives... whereas the US has several direct competitors to TikTok.
    - TheFragenTaken 4y ago
      What you list is exactly what I am saying. Moreover you are conjecturing by saying "deny OS permissions". Simply put, an app cannot do something that would require permissions, without it (unless exploiting vulns). Do you perhaps mean IP location? Which is incomplete, can be spoofed, or manipulated. I agree that no app should probably have this power, but what the original commenter posits, is that TikTok is overreaching. Where "over" is compared to everyone else (including western media). Even, most websites collect this information with or without consent.
- deleted 4y ago
  [deleted]

rvz 4y ago

> The bit that somewhat surprises me is the focus on TikTok, other apps are (AFAIK) capable of the exact same thing. Is the expectation that TikTok is the only app that the Chinese government have access to? this seems a bit unlikely. I don't think it is just about 'profiling people based on app usage'. I have not seen any other social networking app that does this [0] and after suggesting that ByteDance having no access to US data outside of China, well there's this investigation. [1] [2] > I've not seen any movement on banning those similarly. That's because they (Facebook, Instagram, Snap, etc) have instead been fined by the regulators in the hundreds of millions. Don't want a ban? Pay a giant fine for such privacy violations like the rest of the social networking companies have done. [0] https://futurism.com/tiktok-spy-locations-specific-americans https://futurism.com/tiktok-spy-locations-specific-americans [1] https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-tapes-us-user-data-china-bytedance-access https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-... [2] https://www.forbes.com/sites/emilybaker-white/2022/12/22/tiktok-tracks-forbes-journalists-bytedance/?sh=28eee5eb7da5 https://www.forbes.com/sites/emilybaker-white/2022/12/22/tik...

honkler 4y ago

because china. There's no other reason besides this. American empire and its vassal states (like canada) are feeling threatened by the rise of the east.

cscurmudgeon 4y ago
Don’t understand this reasoning at all. China bans all Western social media tech in the widest way possible for more than a decade and the minute a Western govt enacts a ban on govt devices, folks say this is unfair.
- snehk 4y ago
  Companies like Google and Facebook CHOOSE to not operate in China because they don't want to follow the the laws that Chinese companies are following. They're not banned, they're not allowed to operate unless they comply with local laws. Just like they wouldn't be allowed to operate in Europe if they didn't show a Cookie pop-up. It's not like they're not allowed to operate in China because they're American apps. The US should make the data collection itself illegal for everyone and be done with it. They're currently walking this weird path where the exact same data collection is fine if it's Americans doing. It's not one set of rules for everyone.
  - cscurmudgeon 4y ago
    False https://www.investopedia.com/articles/investing/042915/why-facebook-banned-china.asp https://www.investopedia.com/articles/investing/042915/why-f... Any source to backup your claim? > The US should make the data collection itself illegal for everyone and be done with it. They're currently walking this weird path where the exact same data collection is fine if it's Americans doing. It's not one set of rules for everyone. Data collection is NOT the issue. Foreign govt interference is the issue. If tomorrow Google were controlled by a hostile foreign govt., they would face the same bans.
    - snehk 4y ago
      But your link (the NYT times) says exactly what I said. They don't comply with local laws, which is why they're not accessible there. Not sure what else to tell you. Even Facebook's official comment is, which can be found if you follow the links you've posted: “We need to figure out a solution that is in line with our principles and what we want to do, and in line with the laws there, or else it’s not going to happen. Right now, there isn’t an intersection.” > Foreign govt interference is the issue. If tomorrow Google were controlled by a hostile foreign govt., they would face the same bans. So it _is_ simply because it's foreign. How long do you think Google would survive in the US if it didn't comply with US requests? It does comply with requests and three letter agencies have access to data (as per Edward Snowden). If your stance is that it's fine when we do it but not when others do it then that's just what it is.

alewi481 4y ago

Good point. I believe Opera Ltd., the company that develops the Opera web browser, was bought out by a Chinese company a few years ago. I would figure that the amount of browser data that could potentially be exfiltrated would be a major concern as well.

theropost 4y ago

Good point, I think most policy makers are not versed in how IT, and software works enough to understand the implications of such things. Tik Tok is an easy target, and gives them a starting point, but overall, the lack of true understanding of technology by our policy makers is quite astounding, and perhaps troubling at the same time.

Tarean 4y ago

TikTok did use ip tracking of reporters working on a story to try to find whistleblowers. According to TikTok that was a misguided employee who was let go shortly after. Though they are hardly alone in the 'misguided employees' department. Ebay had a whole scheme where they flew out a security team to harass and stalk a couple that had criticized ebay in a blog post. https://www.npr.org/2022/09/30/1126078948/live-spiders-and-cockroaches-ex-ebay-executives-get-prison-time-in-harassment-pl https://www.npr.org/2022/09/30/1126078948/live-spiders-and-c... I think Facebook and Uber had their own location tracking scandals as well.