Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

U.S. Navy bans TikTok from government-issued mobile devices

reuters.com

Post reply on HN
Print view View original

81–90 of 170 posts

Re: U.S. Navy bans TikTok from government-issued mobile devices

#81

Post by rshnotsecure »

brobinson wrote: post #73
rshnotsecure wrote: post #29

Not surprising. For several days now TikTok has left the information of 700 million of their users available via an open S3 bucket. It is online now at this very moment and includes IDFAs from Apple as well as interestingly, although I bet American companies do this to, the MAC Addresses. This is significant because my understanding is that Apple rotates / randomizes the MAC address because those can be used to, quit…

Source? Also, will you post a source for your claim that ProtonMail is compromised? (I remember your username from a thread a few weeks ago)

Can you email me? I will respond very quickly. Sorry about the extra step. I will ping you the IPv4 address. That’s the best way to access.

Re: U.S. Navy bans TikTok from government-issued mobile devices

#82

Post by rshnotsecure »

baobabKoodaa wrote: post #49
rshnotsecure wrote: post #29

Not surprising. For several days now TikTok has left the information of 700 million of their users available via an open S3 bucket. It is online now at this very moment and includes IDFAs from Apple as well as interestingly, although I bet American companies do this to, the MAC Addresses. This is significant because my understanding is that Apple rotates / randomizes the MAC address because those can be used to, quit…

Source needed. I wasn't able to find anything on this by googling.

Email me. Look at my profile for address.

Re: U.S. Navy bans TikTok from government-issued mobile devices

#84

Post by jjhb94 »

thaumasiotes wrote: post #31
angry_octet wrote: post #21

Doesn't matter, they have it on their personal phone. App security is so bad that you pretty much need to virtualize the phone and feed it fake sensor data. The whole idea of unrestricted network access is stupid.

> The whole idea of unrestricted network access is stupid. I've been coming around to a similar idea. I'd like a setup something like this for my desktop: 1. Some devices representing network connections. One or more are "real"; others may be VPNs. 2. Per-application settings governing which network devices, if any, the application may use. Default to none. For example, the common way to use a VPN is like this: 1. St…

Can't you configure this with most firewalls by restricting WAN traffic?

Re: U.S. Navy bans TikTok from government-issued mobile devices

#85

Post by rshnotsecure »

brobinson wrote: post #73
rshnotsecure wrote: post #29

Not surprising. For several days now TikTok has left the information of 700 million of their users available via an open S3 bucket. It is online now at this very moment and includes IDFAs from Apple as well as interestingly, although I bet American companies do this to, the MAC Addresses. This is significant because my understanding is that Apple rotates / randomizes the MAC address because those can be used to, quit…

Source? Also, will you post a source for your claim that ProtonMail is compromised? (I remember your username from a thread a few weeks ago)

Compromised and front company are different things I want to emphasize. ProtonMail hasn’t been hacked, it is a deceptive (and smart) company. So again want to make that distinction. For instance, https://joesdatacenter.com and https://datacenterwest.com are front companies. On the other hand, Facebook is just a kind of sad company that has been compromised obviously many times but isn’t a front company and I very much believe Mark Zuckerberg established it with the best of intentions.

Well I posted Part 1 of Credit Karma stuff please look at https://blog.12security.com

Re: U.S. Navy bans TikTok from government-issued mobile devices

#86

Post by NullPrefix »

Operyl wrote: post #6
NullPrefix wrote: post #4

Earlier quoted context omitted.

Security researchers have a legitimate use of computer viruses. Behavioural analysis or whatever else. Does your grandma have the same legitimate use case?

I do not quite see that as a fair or valid comparison. Recruiters are trying to target 18 year olds, and the reality is a lot of these 18 year olds (outside of the tech field) prefer to use Snapchat, Facebook, etc to communicate. They’re not using these apps to communicate classified information.

My point is that the Navy has roles other than Recruiter.

Re: U.S. Navy bans TikTok from government-issued mobile devices

#87

Post by defined »

kova12 wrote: post #68
Trias11 wrote: post #26

Why's "ban" needed? Government should have full control over government issued devices and only whitelisted modifications should be allowed. If it's not this way - someone at government should be held accountable for jeopardizing the security of the nation.

Because employees feel that they deserve to use Facebook and such on their government issued devices, and if you deny them their God given right, you are racist, sexist, and otherwise despicable person

I think this is an ironic reply. I hope.

Re: U.S. Navy bans TikTok from government-issued mobile devices

#88

Post by dang »

Phylter wrote: post #35

They need to ban Chinese anything from US government anything.

Please don't post unsubstantive comments here, and certainly not nationalistic flamebait. We don't need yet another nationalistic flamewar.

https://news.ycombinator.com/newsguidelines.html

Re: U.S. Navy bans TikTok from government-issued mobile devices

#89

Post by kube-system »

dmix wrote: post #52
noja wrote: post #47

Earlier quoted context omitted.

So because it adds a layer of security rather than 100% watertight perfection, it is bad?

Explain to me how it's useful for security? Because I can guarantee you it will be a giant time-and-money waster with plenty of arbitrary rules that do nothing for security. There's millions of apps and tons come out every year. This nation-wide 'unit' will have to be constantly 'measuring them for security'. This isn't going to accomplish much of anything. Either have a secure phone with pre-installed apps (ie, just…

You are right, there are millions of apps and nobody would be able to manually review them all.

The question then becomes, which error state is more acceptable for the organization? A system that occasionally misses malicious apps? Or a system that occasionally blocks a non-malicious app?

Re: U.S. Navy bans TikTok from government-issued mobile devices

#90

Post by dang »

dontwhy wrote: post #53

Tiktok should be kicked out from our country. Chinese government ban everything(google, facebook, twitter, instgram, ...) of our country, why their company can make money in our country?

Please don't post nationalistic flamebait to HN. It leads to flamewars, which we're trying to avoid here.

https://news.ycombinator.com/newsguidelines.html

Post reply on HN