Hacker News new | past | comments | ask | show | jobs | submit login

To those with knowledge in security, what exactly were the concerns? Here are the four I can think of.

- Users tend to use the same passwords across apps. It would be trivial for TikTok to provide an email + password combo to CCP.

- Until 2020, the tiktok iOS app was accessing the system clipboard at all times that TikTok was running (even in the background) https://www.theverge.com/2020/6/26/21304228/tiktok-security-...

- A sort of vague concern that because CCP can easily compel Chinese companies, it could easily compel TikTok to show / not-show various content to American users. (this could stir political tensions, misinformation etc).

- TikTok (and by extension CPP) could access any content/messages that the app has access to. E.g. Phone contacts (if permission given), private messages sent on TikTok app (possibly even if just typed but not sent).

What else?




There's the "Grindr threat"[1]

There are metadata threats around who's connected to whom, where users are, where they go, etc.

There can be leaked data in videos posted by military personnel

1: https://www.theverge.com/2020/3/6/21168079/grindr-sold-chine...


Right. Grindr puts IP location and and userid information in the ad exchanges so anyone programmatically buying knows which politician/public person is gay and where they are.

We also know who is fat because myfitnesspal does the same thing.

We also know who is pregnant, who has recently been raped, who feels vulnerable. And so on. You see an ad? We know a thing. We know if you like boobs even if you don’t.

Without trying to speak to what American governments and corporations have done with that knowledge, the “security” point is that the Chinese government has this knowledge as well, and the fear they can do something with it.

That being said, what Cambridge Analytica did (a British company) with this kind of knowledge is well-documented, so I can agree the fear is warranted by both those who seek to monopolise those powers, and those who seek to escape them.


> the "Grindr threat"

Hadn't heard of this. The linked article explains:

> At the time of Reuters’ March 2019 report, it was unclear what CFIUS’s specific concerns were, but the FT says the committee worried the Chinese government could use personal data from the app to blackmail US citizens — which could include US government officials.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: