3 ms·

Please remember that Pinduoduo (from the same company as that of Temu) steals information with 0day exploits from consumers in China.

c420 3y ago
This!!! Though it's only limited to China because the app was banned here in March. https://www.cnn.com/2023/04/02/tech/china-pinduoduo-malware-cybersecurity-analysis-intl-hnk https://www.cnn.com/2023/04/02/tech/china-pinduoduo-malware-... "according to cybersecurity researchers, it can also bypass users’ cell phone security to monitor activities on other apps, check notifications, read private messages and change settings. And once installed, it’s tough to remove." “We haven’t seen a mainstream app like this trying to escalate their privileges to gain access to things that they’re not supposed to gain access to,” said Mikko Hyppönen, chief research officer at WithSecure, a Finnish cybersecurity firm. “This is highly unusual, and it is pretty damning for Pinduoduo.”
- fulafel 3y ago
  Also: "Soon after, on March 5, Pinduoduo issued a new update of its app, version 6.50.0, which removed the exploits, according to two experts who CNN spoke to. Two days after the update, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits, according to the Pinduoduo source. [..] Most of the team were transferred to work at Temu. "
  - jesterson 3y ago
    But that's not as exciting to the crowd as "look!! chinese app stealing data!"
    - c420 3y ago
      Uh, I'm not understanding your snark: It's established that a Chinese app was utilizing 0 days and escalating priveledges to exfiltrate data. Most of that team was then transferred to work on the Temu app. According to you, this is not at exciting to the "crowd" as pointing out that these Chinese apps are stealing data?
      - jesterson 3y ago
        If you would bother to read what previous commenter had put, you would find that engineering team was relieved of duties shortly. Chinese apps steal data no less then their western counterparts do. It's just politically beneficial to do fingerpointing at China. Assange and Snowden tried to do same with US - with unfortunate and known results.
        c420 3y ago
        I believe you are the one not reading (hint, read the line after the part you find so enamoring): "Two days after the update, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits, according to the Pinduoduo source. [..] Most of the team were transferred to work at Temu. " >Chinese apps steal data no less then their western counterparts do. The whataboutism you add doesn't strengthen your argument. Also, source for American apps using 0 days to escalate privileges, please.
        jesterson 3y ago
        > I believe you are the one not reading You are right - it was my mistake. > The whataboutism you add doesn't strengthen your argument. Where did you see "whataboutism" - whatever that is - I'll leave to you.
throwaway2990 3y ago
There’s many people complaining about their bank accounts or credit cards being hacked or charged after using Temu. So Temu is just new lipstick on the same pig.
- smeej 3y ago
  Came here to say this. Two of my friends work in chargebacks and have said it's a disturbing trend, their customers having to have their cards replaced very shortly after ordering from Temu. If you still want to order, do it with a masked card number.
- jesterson 3y ago
  Source?

c420 3y ago

This!!! Though it's only limited to China because the app was banned here in March. https://www.cnn.com/2023/04/02/tech/china-pinduoduo-malware-cybersecurity-analysis-intl-hnk https://www.cnn.com/2023/04/02/tech/china-pinduoduo-malware-... "according to cybersecurity researchers, it can also bypass users’ cell phone security to monitor activities on other apps, check notifications, read private messages and change settings. And once installed, it’s tough to remove." “We haven’t seen a mainstream app like this trying to escalate their privileges to gain access to things that they’re not supposed to gain access to,” said Mikko Hyppönen, chief research officer at WithSecure, a Finnish cybersecurity firm. “This is highly unusual, and it is pretty damning for Pinduoduo.”

fulafel 3y ago
Also: "Soon after, on March 5, Pinduoduo issued a new update of its app, version 6.50.0, which removed the exploits, according to two experts who CNN spoke to. Two days after the update, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits, according to the Pinduoduo source. [..] Most of the team were transferred to work at Temu. "
- jesterson 3y ago
  But that's not as exciting to the crowd as "look!! chinese app stealing data!"
  - c420 3y ago
    Uh, I'm not understanding your snark: It's established that a Chinese app was utilizing 0 days and escalating priveledges to exfiltrate data. Most of that team was then transferred to work on the Temu app. According to you, this is not at exciting to the "crowd" as pointing out that these Chinese apps are stealing data?
    - jesterson 3y ago
      If you would bother to read what previous commenter had put, you would find that engineering team was relieved of duties shortly. Chinese apps steal data no less then their western counterparts do. It's just politically beneficial to do fingerpointing at China. Assange and Snowden tried to do same with US - with unfortunate and known results.
      - c420 3y ago
        I believe you are the one not reading (hint, read the line after the part you find so enamoring): "Two days after the update, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits, according to the Pinduoduo source. [..] Most of the team were transferred to work at Temu. " >Chinese apps steal data no less then their western counterparts do. The whataboutism you add doesn't strengthen your argument. Also, source for American apps using 0 days to escalate privileges, please.
        jesterson 3y ago
        > I believe you are the one not reading You are right - it was my mistake. > The whataboutism you add doesn't strengthen your argument. Where did you see "whataboutism" - whatever that is - I'll leave to you.

throwaway2990 3y ago

There’s many people complaining about their bank accounts or credit cards being hacked or charged after using Temu. So Temu is just new lipstick on the same pig.

smeej 3y ago
Came here to say this. Two of my friends work in chargebacks and have said it's a disturbing trend, their customers having to have their cards replaced very shortly after ordering from Temu. If you still want to order, do it with a masked card number.
jesterson 3y ago
Source?