Live data from Hacker News

TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

businessinsider.com

41–50 of 426 posts

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#41

Im more curious what tiktok data amouts to and how it could be used by CCP. I’ve heard of bans of Tiktok use by politicians and army bases and such. Without sensitive location data to some specific users but solely the young sharing memes, I wounder how CCP could use that data… Not a Tiktok user myself, if anyone could illuminate me on this it’s be great. For example does tiktok have direct messages from users to use…

Yes, there is a private/direct messaging feature in TikTok that should of course be considered accessible to ByteDance, and by extension the Chinese government.

However, that is not the only valuable information.

The user behavioral profiles (which users have viewed what videos when, what do they engage with, what do they re-share to others) are valuable, particularly if you can de-anonymize them against account registration data. Also, the social graph of a big service like TT is a goldmine.

Both types of information are useful whether you're doing traditional espionage, targeted influence operations, or mass-influence/propaganda.

For traditional espionage, knowing what sort of content someone watches could give you direct insight into non-public aspects of their life that could be leveraged. (I.e. mental or physical illness, sexual interests, relationship problems, fringe political leanings, etc. etc.) There's a fair amount of not-exactly-porn but porn-adjacent stuff (and lots of health/wellness/lifestyle content) on TT that could give you leverage or at least ideas on how to approach someone if you wanted to convince them to pass information to you, provide access to something, etc.

The real value is in targeted influence ops, though. Find someone you want to influence, or a small subset of the population you want to influence, and drill down to figure out who their 'thought leaders' / opinion-setters are within their social circle. Figure out what kind of media engages them. Go after them indirectly via their friends/colleagues/family. TT is demographically limited right now, so you're probably not changing many Senators' votes directly, but you might be able to get their kids, their kids' friends, their junior staffers, etc. thinking a particular way. Done the right way, the actual influence target might never even need to be messaged-to directly. They'd get the full social-media 'Inception' treatment and probably think they came up with their opinion organically or by being in touch with the culture.

And then of course for mass-messaging/propaganda, you use the information in aggregate just like any big advertising company does, but for political ends, and without having to engage an actual advertising company that's going to create a tangible trail.

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#42

Im more curious what tiktok data amouts to and how it could be used by CCP. I’ve heard of bans of Tiktok use by politicians and army bases and such. Without sensitive location data to some specific users but solely the young sharing memes, I wounder how CCP could use that data… Not a Tiktok user myself, if anyone could illuminate me on this it’s be great. For example does tiktok have direct messages from users to use…

I will just tweak algorithm to show you more videos supporting a particular ideology which favors my motives. The rest your brain will do it yourself!

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#43

Earlier quoted context omitted.

But it's the US, it's the bastion of democracy. Govt here doesn't put backdoors, doesn't sponsor crypto companies, doesn't target individuals and ship them to overseas camps to avoid torture laws. Wage fake wars. Doesn't use it's intelligence agencies to interfere with other countries. Oh!

For all our faults, we're not the ccp. Bashing America doesn't undo the horrors committed by the ccp. We're talking about an authoritarian regime that is currently committing genocide. Should we really just roll over and give them unfettered access to our markets while they are incredibly hostile to our companies and where we only get access by giving away ip?

[flagged]

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#44
post #30

Meanwhile, the CCP can just open their huge wallets and pay US-based data-brokers for all the private information of US citizens that they ever dreamed of ...

Please don't use the fact that there are other imperfections in the system to prevent this one from getting fixed.

You mean please don't fix this gigantic gaping hole, so that this much smaller hole gets fixed first and people forget about the bigger problem?

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#45
post #30

Meanwhile, the CCP can just open their huge wallets and pay US-based data-brokers for all the private information of US citizens that they ever dreamed of ...

Please don't use the fact that there are other imperfections in the system to prevent this one from getting fixed.

I think they are bringing awareness to an additional issue rather than dismissing this one

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#46
post #28

Who uses TikTok for sensitive information? Government access to TikTok user data is of limited additional value compared to whatever TikTok sells to large advertisers and analytics partners.

When you couple this with the fact that China had secret police stations in the US trying to capture Chinese dissidents, you could use such data to track those people to kidnap them, regardless of if the information was sensitive on the app or not.

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#48

Im more curious what tiktok data amouts to and how it could be used by CCP. I’ve heard of bans of Tiktok use by politicians and army bases and such. Without sensitive location data to some specific users but solely the young sharing memes, I wounder how CCP could use that data… Not a Tiktok user myself, if anyone could illuminate me on this it’s be great. For example does tiktok have direct messages from users to use…

Most simple is to control algorithms pushing whatever agenda China wants America youth focused on.

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#49
post #15

I would be extremely surprised if a state-actor like China couldn’t access most US company data at will. If you can invest several billions and have thousands of people working to create a breach, no company is safe, not even AWS or Microsoft. In this case, that’s even way easier, the company is Chinese, the CCP can have this access lawfully, is this something unexpected? I’m much more concerned by the laziness of mo…

I would have been unsurprised if the US government hadn't already forced them to host with Oracle a year or two ago supposedly to prevent exactly this from happening. Is Larry Ellison a Chinese spy? He would probably have to either be complicit or criminally negligent to allow this to happen given he was given the contract precisely for this reason. I'm also reminded of that fake story from the WSJ about American chi…

Forcing ByteDance to host the data in the US, on Oracle's servers or anyone else's, doesn't mean a lot if there are a bunch of people in China with the login to those servers. Who has access to the data and the various administrative controls over it are more important than where it physically resides.

ByteDance has claimed that their US operations were administratively firewalled from their Chinese ones, and then it's been repeatedly shown not to be the case. At this point they have lost all credibility about their ability to 'firewall' or internally control access to user data, probably because they (or certain parts of the company) don't really want to.

Re: TikTok Owner Had 'Backdoor' for CCP Access to US Data, Lawsuit Alleges

#50
post #45

Earlier quoted context omitted.

Please don't use the fact that there are other imperfections in the system to prevent this one from getting fixed.

I think they are bringing awareness to an additional issue rather than dismissing this one

They might be trying, but the end result will be a petty destruction of progress. "In order to make any change you must fix my much larger and harder to solve issue" will ensure that nothing ever gets done.

In the face of just how serious this risk is, this sort of stance is self destructive and nearly malicious.

Post reply on HN