Live data from Hacker News

TikTok requests access to devices on local network

twitter.com

41–50 of 158 posts

Re: TikTok requests access to devices on local network

#41

Some other apps (Signal?) have also done this out of the blue, though they may have since added a UI around this. Regardless, Apple has done the right thing by putting this behind a permissions box, but the developer should be required to have some sort of explanation string of why they need this.

I assume signal is udp hole punching to get around NAT.

Re: TikTok requests access to devices on local network

#42

So just use their web site. Honest question - why do people use apps for such?

On mobile they heavily push people to the app... this is the answer to most "just use the website" questions. Reddit mobile has been particularly bad about this lately, by blocking content. Instagram hits you with a login gate after viewing a few photos, etc... all of these companies are pushing their users to the place where they can siphon off the most data, which at the moment are apps.

Re: TikTok requests access to devices on local network

#44
Is it TikTok or is it just because of a captive portal on the WiFi?

It happened to me just yesterday: “Why does X require local network access? Ugh.” A minute later “Oh, Y is also requiring network access.”

Yes, I was on a public wifi.

This may be 100% Apple’s fault, everyone here is just commenting on a photo and not confirming that they also saw the message today.

Re: TikTok requests access to devices on local network

#45

Microsoft Teams does this as well, purportedly for video calling (!?) Was there ever an explanation why the permissions are needed?

I assumed it was to gracefully deal with handoff from one device to another while in a meeting since you can start on one device and continue with another, or maybe to share your screen from another device etc. It would be nice to know why exactly certain permissions are requested; sometimes that’s done by telling you what feature it might break if you don’t grant those permissions.

Re: TikTok requests access to devices on local network

#46

Some other apps (Signal?) have also done this out of the blue, though they may have since added a UI around this. Regardless, Apple has done the right thing by putting this behind a permissions box, but the developer should be required to have some sort of explanation string of why they need this.

Apple does require a string for location access motivation, hopefully they'll do that for this one as well. Ideally all of them.

Re: TikTok requests access to devices on local network

#47

Earlier quoted context omitted.

> They used to check your clipboard the whole time too. To be fair quite a lot of apps did this to enable deep links/automatically opening certain clipboard links. Every big app has changed this to no longer show the 'pasted from' notification. And it was never shown that they export those clipboard contents to homebase.

"Lots of people do it" should never be considered a legitimate excuse. Trying to use that excuse should get you kicked out of the meeting room.

why should it get you kicked out of the meeting room? if everyone else is doing it and have a better ux, i'd imagine you'd be kicked out of the meeting roomm if you're not doing it.

Re: TikTok requests access to devices on local network

#48
post #23

Earlier quoted context omitted.

Of course you can. Look up VPN routing / split tunneling. It’s not uncommon for corporate VPNs to only route intranet traffic for instance; and LAN is usually whitelisted.

Besides corporate VPNs, typical consumer VPNs are also set up to allow LAN access. Your average joe-smoe would be annoyed if their network printer stopped working every time they turned on their VPN to watch netflix movies or whatever.

Yes, "LAN is usually whitelisted" in my comment is independent from the corporate split tunneling example.

Re: TikTok requests access to devices on local network

#49
post #9
post #3

Earlier quoted context omitted.

Assuming this is iOS doesn't the native screen sharing capability handle that?

Not chromecast. My charitable guess is they're adding support for chromecasting behind feature flags/AB testing, but don't yet have it correctly enabled/disabled. There was a lot of uproar over instagram immediately using the microphone/camera constantly, when they actually just always had the API initialized to make swiping to the camera snappier.

That could also explain why they didn't bother to provide in the notification to the user why they're requesting this access: because they weren't intending to request it (yet).

I find the conspiracy theories more compelling, but less likely.

Re: TikTok requests access to devices on local network

#50
post #30
post #13

Earlier quoted context omitted.

Any discussion of intent is always going to be speculation. All we can think about is what such a thing would be capable of if it were somehow malicious. The first possibility that comes to my mind would be sniffing Ethernet MAC addresses because it could be done without any sort of device-specific support built in to the app. Assuming your local devices’ manufacturers are following Da Rulez, the first part of their…

You can also just take the collection of devices typically on the network, hash the MAC addresses all together, and now you have a unique identifier for a household

But devices would join and leave the network in a household - especially phones. Maybe you could have a listening period, e.g. a week, where you build a set of witnessed devices and then hash that for a household id?
Post reply on HN