News for hackers. Stuff that matters.
Re:ByteDance won't sell TikTok U.S. operations to Oracle or ... by tjansen on Monday September 14, 2020 @08:12AM (#24469164)
"But the US government has been very thin on details on how serious the security concern actually is"

Even assuming that there are no vulnerabilities in Android and iOS, the Tiktok app has access to video, audio and GPS. If the infrastructure would be hosted in the US and the Tiktok source code has been reviewed, there would still be the possibility that the Tiktop application has a hidden backdoor that allows a third party to execute code within the context of the app and to locate a user (at least when the app is open) and listen to any conversion she has.

Re:ByteDance won't sell TikTok U.S. operations to Oracle or ... by xster on Monday September 14, 2020 @11:20AM (#24471210)
Doesn't that conceptually apply to all Chinese apps? Also, all your TVs, phones, routers etc are all made in China. Isn't the real solution to the conceptual problem you're referring to to stop trading with China? That's the only way to be consistent logically.
Re:ByteDance won't sell TikTok U.S. operations to Oracle or ... by tjansen on Tuesday September 15, 2020 @03:22AM (#24478700)
You're right. If you have any app or device that's capable of recording audio, you need to be aware of the real possibility that the Chinese government would have the ability to hear any word you speak. Not sure how relevant it is for a 'regular' person, but as a person of interest you shouldn't have such device or app. Nor anyone who is known to be close to you.
Re:ByteDance won't sell TikTok U.S. operations to Oracle or ... by tupputuppu on Monday September 14, 2020 @06:23PM (#24475827)
Tiktok doesn't have or ask for location permission at least on iPhone