Live data from Hacker News

Trump says he will ban TikTok through executive action

cnbc.com

611–620 of 694 posts

Re: Trump says he will ban TikTok through executive action

#611

Earlier quoted context omitted.

I see this line of reasoning often, and frankly, I don’t understand it at all. TikTok poses exactly the same risk as any other app on the App/Play stores. They go through exactly the same static code review and signing process - conducted by two American companies. Any security risk can be addressed at that point in the pipeline. Assuming the concern is about “data security” (vs OS level security), I see literally ze…

> TikTok poses exactly the same risk as any other app on the App/Play stores. No, it does not. See the research here [1]. TikTok is a data collection engine disguised as a social media tool. [1] https://penetrum.com/research

That was too ambiguous on my part - to clarify, I meant TikTok has exactly the same potential for risk.

TikTok isn’t doing anything that Facebook and Twitter are doing, or may do in future.

If there’s a technical security risk that we should be worried about, then I am equally worried about every single other non-Chinese company exploiting it.

If this were nation-agnostic, generic data protection laws, no one would bat an eyelid. Couching in terms of hand-wavy national security is just so implausible and blatantly self serving.

Re: Trump says he will ban TikTok through executive action

#612

Earlier quoted context omitted.

I am talking about how they may rationalize it, not what the actual goal is. Take the Iraq war. The goal was to further assert ourselves in the Middle East, settle old scores, signal to our official enemies we mean business and enrich a bunch of military contravtors. But the rationalization that I think made it possible for a lot of these people to sleep at night was things like defending the country, empowering wome…

I mean, the societ union collapsed remarkably quickly. At least in Romania, the collapse was partly motivated by illegal showings of western films in homes across the country which have the Romanians (whose media and travel were tightly restricted) a glimpse into the freedoms and abundance they were missing out on. I’m sure it’s not exactly the same but it gives me pause.

> I mean, the societ union collapsed remarkably quickly

I don't think comparing these two is all that helpful. The Soviet Union made its authoritarian side too visible, i.e. Prague 68 etc.

Combine this with the fact that the union wasn't really united by any sense of national identity, that is the Czechs viewed the soviets as the Russians and their own party officials as puppets to Moscow. In that sense the Soviets were foreign occupiers. This is not true for the CCP.

Another important point is that quite frankly, most people care about material well being first, political preferences second. By the time the USSR collapsed, its citizens felt like they'd be in a dire economic situation as long as the status quo continues. This is a much more powerful force than the rather vague promises of a democracy, I'd say.

The Soviets made the mistake of not allowing private business to occur basically at all, which means people had no hope of ever "making it".

In America, you have your Zuckerbergs that help keep the idea of an American Dream alive and something to look up to as being possible if one only works hard enough.

The Soviet Union didn't have that motivational force, however deceptive it is, but China does have its Jack Ma figures. Its economy is a mix of centrally planned and free trade and much more complex than the Soviet one was. It's also a bigger internal market. In other words, you could dream about potentially being a billionaire in China, you couldn't in the Soviet Union.

Also, many Chinese enjoy a relatively middle class lives that, as long as one doesn't get too political, probably don't feel that restrictive day to day.

As long as the CCP can keep the economy growing and people can maintain their middle class lifestyles, no revolution is coming.

Re: Trump says he will ban TikTok through executive action

#613

Earlier quoted context omitted.

I mean, the societ union collapsed remarkably quickly. At least in Romania, the collapse was partly motivated by illegal showings of western films in homes across the country which have the Romanians (whose media and travel were tightly restricted) a glimpse into the freedoms and abundance they were missing out on. I’m sure it’s not exactly the same but it gives me pause.

> I mean, the societ union collapsed remarkably quickly I don't think comparing these two is all that helpful. The Soviet Union made its authoritarian side too visible, i.e. Prague 68 etc. Combine this with the fact that the union wasn't really united by any sense of national identity, that is the Czechs viewed the soviets as the Russians and their own party officials as puppets to Moscow. In that sense the Soviets w…

Fair enough. My point was less that these are very good comparison points and more that video and culture are perhaps more powerful than we might initially think. I don’t think any CCP revolution is around the corner.

Re: Trump says he will ban TikTok through executive action

#614

Earlier quoted context omitted.

Come on. China’s communist regime killed tens of millions of its own people within living memory. It presently commits egregious human rights abuses against its Uighur Muslim population. It prohibits its citizens from accessing media which might possibly negatively portray The Party. Banning TikTok may be a bad idea and the US certainly has its own troubled history, but this executive order isn’t “hypocrisy” and it c…

I do not agree with the CCP, but I also don't like it when people present non-nuanced arguments that feel a bit like U.S. ra-ra propaganda copypasta. > China’s communist regime China's regime is many things but cannot really be described as communist much anymore, this is erasing a whole lot of history post Mao. > China’s communist regime killed tens of millions of its own people within living memory. Absolutely. Tha…

I’m not claiming that the ban is related to human rights, but rather that the US and China aren’t in the same moral ballpark. Banning TikTok isn’t equivalent to education camps, forced organ harvesting, sterilization, etc of ethnic minorities.

Re: Trump says he will ban TikTok through executive action

#615
post #600
post #539

Earlier quoted context omitted.

How would that even work, exerting pressure by merely providing another pipeline?

Look up Ukraine and Nordstream 2. Also you need to look up the purpose of the pipeline. It’s supposed to become the primary pipeline, not a simple small supplement. Basically: grow dependence, extract concessions. The same way a crack dealer on a street corner does.

And how would dependence on US gas delivered by ship be any better? As far as I can tell, it is the US acting up and sanctioning a German project at the moment. Not a great sales-pitch for future business.

There is no salvation West or East of Europe. Europe has to do it's own thing. The US has shown, that we are mereley allies as long as we are useful and it does not hesitate to sanction it's allies. There is no friendship between countries.

Re: Trump says he will ban TikTok through executive action

#616

Earlier quoted context omitted.

There is ongoing research by different companies/people. For example, check out penetrum: https://penetrum.com/research Got it from this reddit thread: https://www.reddit.com/r/videos/comments/fxgi06/not_new_news... It'd be awesome if the reverse engineered code was on Github or something. I found this repo but wasn't able to look deep into it yet, so take with a grain of salt: https://github.com/augustgl/tiktok_sour…

Thanks! penetrum has this nice white paper: Penetrum_TikTok_Security_Analysis_whitepaper.pdf This is their conclusion: "After extensive research, we have found that not only is TikTok a massive security flaw waiting to happen, but the ties that they have to Chinese parties and Chinese ISP’s make it a very vulnerable source of data that still has more to be investigated. Data harvesting, tracking, fingerprinting, and…

That white paper is scare-mongering garbage, and I don't say that lightly. Some of the horrible things TikTok is supposedly doing:

* Using Java reflection (which almost everyone does)

* Webview (many of your apps are just thin webview wrappers)

* Log device information (uh, logging things like the OS version for diagnostics and metrics is perfectly normal)

The paper uses the word "monitoring" appearing in a debug message as evidence that the app is built to spy on users. Here's the log message that they want to claim proves TikTok evil-doing:

    AFlogger.afInfoLog("Turning on monitoring")
Uh, the word "monitoring" has plenty of perfectly innocuous uses, e.g., monitoring memory use. If this thing really were trying to monitor user behavior in some sneaky way for the CCP, why the hell would they log about it, in English?

In another section of scare-longering, these "researchers" try to cast asperations on the app calling the Java equivalent of system(3) to run a subprocess. Uh, so what? That's also a fairly common thing to do on Android --- people use it to, e.g., run logcat for diagnostics (logcat filters the logs to only ones from the running UID, so there's no privacy leak).

In yet another section of scare-mongering, the document suggests that TikTok's use of MD5 is some kind of deliberate back-door. No, it's probably just like every other use of MD5 these days: some junior developer who hasn't kept up on the recent MD5 attacks.

Yes, TikTok ignores TLS errors. That's just shitty programming. But like the MD5 thing, I'm going to chalk it up to just shitty coding, not some kind of deliberate spyware backdoor. This code would certainly not pass my code review. But I see no evidence of malice. These are errors that junior developers make everywhere.

There's also a SQL injection. The researchers haven't shown that the inputs to the SQL query are unsanitized, and even so, injecting SQL from a UI text book to the local SQLite database is no big deal. The user owns the device! It's certainly not evidence of some kind of nefarious backdoor.

On top of all of that, the app is sandboxed, like every other Android app. Even if there were some ultra-mega remote code execution facility wired directly to Xi Jinping's desk, there'd be minimal risk, because the app couldn't look at the rest of the system! This whole analysis is aggressively, painfully, and conspicuously stupid. All this article tells me is 1) TikTok's software engineering team is too junior, and 2) people really, really, really want to believe that the app is evil.

This execrable article is one of the worst security reviews that I have ever read, and I've read a lot of them. It makes me yearn for the days of Colin Powell bullshitting the UN about Iraqi yellowcake. At least Powell didn't make 6th grade writing and logic errors.

This is "so if she weighs the same as a duck...she must be a witch!" level of analysis. https://www.youtube.com/watch?v=z5iMhHCGuOI

Re: Trump says he will ban TikTok through executive action

#617

Earlier quoted context omitted.

What do you base your reasoning that this is just Trump being butthurt on? Because I have a strong suspicion that even though you don’t think the TikTok ban is ideological, your reasoning for that on the other hand is ideological.

The fact that Trump has done literally nothing but the things that benefit him personally his entire presidency? The fact that this is conveniently happening the week the US has posted record shatteringly low economic numbers and every time the stock market or the economy isn’t doing well he does something to distract the media and the public? The fact that we managed to elect a grifter? The fact that the man can’t r…

In your first paragraph, you're supporting your baseless accusation with even more baseless accusations (all speaking in absolutes, and posited as facts! And some of them are so comical I'm not sure how you can seriously make such claims - it's funny you should mention cults, do you realize how you yourself sound?)

In your second paragraph, you're missing that no other Chinese app has 100 million American users. So yeah, no other app is under fire, but no other app matters nearly as much.

As to my username, for some reason I'm not surprised that it's too politically incorrect for you.

Re: Trump says he will ban TikTok through executive action

#618

Earlier quoted context omitted.

I do not agree with the CCP, but I also don't like it when people present non-nuanced arguments that feel a bit like U.S. ra-ra propaganda copypasta. > China’s communist regime China's regime is many things but cannot really be described as communist much anymore, this is erasing a whole lot of history post Mao. > China’s communist regime killed tens of millions of its own people within living memory. Absolutely. Tha…

I’m not claiming that the ban is related to human rights, but rather that the US and China aren’t in the same moral ballpark. Banning TikTok isn’t equivalent to education camps, forced organ harvesting, sterilization, etc of ethnic minorities.

> that the US and China aren’t in the same moral ballpark.

I am not saying that it's necessarily the same, but is probably a lot closer than one would hope.

U.S. prison populations are basically forced labor, killing millions of civilians, not its own citizens but still, within living memory is also a thing, millions are without health insurance during a pandemic and still no universal healthcare in sight, police brutality, treatment of migrants, coups in foreign countries, school shootings, drone strikes with over 90% civilian causalities, holding people without trial at CIA black sites and GB etc.

Then you have the crimes that weren't committed directly by the U.S. but by its ales with U.S. encouragement and sale of arms, like what the Saudis are doing in Yemen right now, or the indirect funding of extremist elements in places like Syria via the likes of Qatar.

One area where the U.S. is far worse is overthrowing democratically elected leaders of sovereign countries that weren't sufficiently subservient to American corporate interests. It's basically the government doing the bidding of private interests, which is the very definition of fascism.

Again, I don't think they're exactly the same, but not as far apart as you'd think. The one major difference is the U.S. treats foreigns like trash, while China likes to keep it more domestic on that front.

Re: Trump says he will ban TikTok through executive action

#619

Earlier quoted context omitted.

> I mean, the societ union collapsed remarkably quickly I don't think comparing these two is all that helpful. The Soviet Union made its authoritarian side too visible, i.e. Prague 68 etc. Combine this with the fact that the union wasn't really united by any sense of national identity, that is the Czechs viewed the soviets as the Russians and their own party officials as puppets to Moscow. In that sense the Soviets w…

Fair enough. My point was less that these are very good comparison points and more that video and culture are perhaps more powerful than we might initially think. I don’t think any CCP revolution is around the corner.

Yeah, the "soft power" of Hollywood is certainly significant and it is kind of genius that the U.S. realized this so early.

But it's not going to be the basis on which regimes stand or fall. Especially in China, where the cultural barrier is most likely higher in terms of "connecting", than it was in Eastern Europe.

Re: Trump says he will ban TikTok through executive action

#620
post #258

Earlier quoted context omitted.

There are people with much more “intolerant” (restrictive) diets than halal and kosher, and yet, those don’t “win.” This is an extremely simplistic explanation with, I suspect, very little predictive power.

They have not crossed the "threshold of winning". RTFA, please!

Right. So the point is really “the winners win.”
Post reply on HN