4 ms·
>It wasn't clear precisely what information can be extracted from which apps, but one of the slides gave the example of a user who uploaded a photo using a soci
by gruez 2y ago
>It wasn't clear precisely what information can be extracted from which apps, but one of the slides gave the example of a user who uploaded a photo using a social media app. Under the words, "Golden Nugget!" it said that the data generated by the app could be examined to determine a phone's settings, where it connected to, which websites it had visited, which documents it had downloaded, and who its users' friends were.
Sounds like those apps weren't using SSL, and NSA could eavesdrop on whatever API calls or telemetry it was sending? There's no real evidence that those apps are complicit, even though the article tries to imply that.
- frollogaston 2y agoTikTok's CDNs also don't use SSL, unless that changed.
- mrheosuper 2y agoSSL added and removed here ;-)
- buyucu 2y agonot using SSL means the app devs were either stupid, or they were complicit.