News for hackers. Stuff that matters.

A comment on U.S. Navy bans TikTok from government-issued mobile devices. Parent comment

Re:U.S. Navy bans TikTok from government-issued mobile devices by manwe150 on Saturday December 21, 2019 @07:58PM (#21854393)
Honest question: but what’s the threat model for wanting an OS to block this? I’ve so far only thought of leaking IP address and Bitcoin mining. But any website already easily has both capabilities (with somewhat arbitrary open sockets after the WebSockets handshake). Is the expectation that an app implementation should have less permissions than an equivalent website and so be the “safer” option?
[ Parent | on HN ]
Re:U.S. Navy bans TikTok from government-issued mobile devices by SpicyLemonZest on Saturday December 21, 2019 @10:10PM (#21854924)
I want to ensure that the app is just locally computing the decibel level, rather than streaming out data about what it's hearing.

I would ideally want websites to also have a "no more network access after your initial load" mode, but as you say that's fundamentally incompatible with modern web development. So I kinda just accept the loss there.

[ Parent | on HN ]
Re:U.S. Navy bans TikTok from government-issued mobile devices by hrktb on Saturday December 21, 2019 @09:13PM (#21854691)
Isn’t it the same as any other access permission ?

For instance is there any specific model behind blocking device location, short of just not wanting to share the info ?

I’d see not wanting an app to send anything related to your device nor that it was even opened to be of the same kind.

[ Parent | on HN ]