Earlier quoted context omitted.
How is it possible that there be two separate silos when I can follow someone in China despite being in the US
The person in China can use TikTok (international) or you can use Douyin (Chinese), putting the two of you in the same silo.
Privacy analysis of Tiktok’s app and website
201–207 of 207 posts
Re: Privacy analysis of Tiktok’s app and website
#202Earlier quoted context omitted.
The person in China can use TikTok (international) or you can use Douyin (Chinese), putting the two of you in the same silo.
Are you seriously implying the Chinese government doesn't have access to both of these sets of data?
Note however that for the Chinese silo, they can just open the front door, whereas doing the same for the international version would endanger their profits. Profit is an incentive the CCP responds to very well. For the surveillance agencies, hacking the database is probably easier than setting up an official channel that too many people would have to know about and agree to.
Re: Privacy analysis of Tiktok’s app and website
#203I think this says all we need to know: http://pro-tiktok.s3.amazonaws.com Notice the file left in there by a previous explorer of the internet. This gentleman has even found RCE exploits with TikTok, and they simply do not and will not respond to their security line. Olivia Newton at NBC I believe even reached out, and she could not get them to get back to her. I forwarded this (really another bucket of equal content…
Just because the bucket says "tiktok" in the name, doesn't mean it's in any way associated with them. This appears to be ~1000 videos, anything particularly interesting about it? (My company gets many such reports; sadly researchers often strongly insist otherwise)
Re: Privacy analysis of Tiktok’s app and website
#204Earlier quoted context omitted.
Just because the bucket says "tiktok" in the name, doesn't mean it's in any way associated with them. This appears to be ~1000 videos, anything particularly interesting about it? (My company gets many such reports; sadly researchers often strongly insist otherwise)
It is associated with name. A domain held by them had a link record that pointed to this bucket. Also previous acquisitions of TikTok have buckets, currently open, and those have metadata which shows ownership. Either way, TikTok won’t even respond, which is very sad and absolutely deserves a response so the few researchers don’t have to waste time following up. NOTE: Your point makes sense though and I’ve run into t…
Re: Privacy analysis of Tiktok’s app and website
#205Earlier quoted context omitted.
It is associated with name. A domain held by them had a link record that pointed to this bucket. Also previous acquisitions of TikTok have buckets, currently open, and those have metadata which shows ownership. Either way, TikTok won’t even respond, which is very sad and absolutely deserves a response so the few researchers don’t have to waste time following up. NOTE: Your point makes sense though and I’ve run into t…
Do you happen to know that link?
Re: Privacy analysis of Tiktok’s app and website
#206Earlier quoted context omitted.
Just because the bucket says "tiktok" in the name, doesn't mean it's in any way associated with them. This appears to be ~1000 videos, anything particularly interesting about it? (My company gets many such reports; sadly researchers often strongly insist otherwise)
1000 is the default page size. 450,116 videos and counting.
Re: Privacy analysis of Tiktok’s app and website
#207Earlier quoted context omitted.
I really want to do this, but last time I checked it also leads to FF sending UTC time back to sites (or something like that), resulting in showing non-local time for your own and other interactions on pretty much all sites like github/slack/... Fairly annoying. I hope this becomes a separate setting at one point.
I enabled it and Todoist would show me a dialog on every page reload to set my timezone to UTC. After I realized that resistFingerprinting was causing it, I had to disable it. It would be nice if the settings inside resistFingerprinting were configurable. I understand that the point of it is to make every browser look the same to analytics engine, but having timezones and zoom levels reset is not the best thing.