News for hackers. Stuff that matters.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by elihu on Thursday March 30, 2023 @12:57AM (#35368202)
Alexandria Ocasio-Cortez is opposed to the TikTok ban. About 5 days ago, she posted a video on TikTok explaining her thinking here:

https://www.tiktok.com/@aocinthehouse/video/7214318917135830...

The summary is: this would be a pretty unprecedented move to effectively ban a social media company. In this case, TikTok isn't even doing anything illegal as far as we know, because the United States has basically no data privacy laws that would be relevant here in the first place. The solution to that problem isn't to ban TikTok, it's to create a regulatory framework where companies are obligated to follow certain rules.

Also, with these sorts of issues Congress usually receives a classified briefing where they're told the nature of the allegations against a specific party. Congress, however, has not been briefed on what TikTok is doing, which is odd. And besides, those allegations should probably be shared publicly in this case because the effects of any potential legislation are so significant. As she says, "this doesn't feel right." It seems like Congress isn't following its normal procedures.

She doesn't talk about the language of any particular bill or how it doesn't mention TikTok at all; I'm not sure if the version referred to by the original video was available to AOC when she made her video.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by skywal_l on Thursday March 30, 2023 @01:43AM (#35368555)
I don't know anything about this and on principle AOC is right in my optionion but Europe has the GDPR and other national legal privacy protection and Tik Tok is still being used in Europe. Do we know if Tik Tok[0] does anything different in Europe and the US?

[0]Tik Tok and any other social media spyware in general.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by fancl20 on Thursday March 30, 2023 @01:59AM (#35368651)
Just do their best to comply the EU law so they can keep operating? https://www.reuters.com/technology/tiktok-ceo-eus-vestager-c...
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by DuckFeathers on Thursday March 30, 2023 @03:12AM (#35369162)
If the US bans it on national security grounds, there is NO WAY that any of the NATO countries will not ban it immediately. So 60% of European population will lose access. Then, they will recommend it to any other country that still wants to be friendly with the US... which means all of Europe (and most of the rest of the world) will ban it very soon.

It's important to note that it's not the "spyware" that they are banning; it's a media that they don't have full control over that they are banning. Wikileaks, for example, will be banned as a part of this.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by akie on Thursday March 30, 2023 @03:36AM (#35369351)
> If the US bans it on national security grounds, there is NO WAY that any of the NATO countries will not ban it immediately.

I'm sorry, but that's not how this works. These other NATO countries are independent countries with their own legislature and parliaments, many of them bound more by EU rules than by current US tendencies or laws. Sure, the US might try to pressure NATO countries to follow suit, and some of them might, but it's far from given.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by dijit on Thursday March 30, 2023 @05:30AM (#35370128)
For evidence of how this will go: look at Huawei.

Banned in the UK & Germany (but only for 5G infra I think[0]) rest of NATO didn't pay strong attention.

[0]: https://www.gov.uk/government/news/huawei-legal-notices-issu...

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by beebeepka on Thursday March 30, 2023 @05:43AM (#35370195)
We're independent vassals
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by chottocharaii on Thursday March 30, 2023 @07:04AM (#35370827)
(laughs in Australian)
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by defrost on Thursday March 30, 2023 @07:15AM (#35370914)
The US isn't even the leader in such blocks and bans in many cases either; Australia blocked Huawei and ZTE from providing equipment for its 5G network on security grounds back in August 2018 .. and various European countries were muttering about such concerns since that time at least.

https://techcrunch.com/2018/08/22/australia-bans-huawei-and-...

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by andruby on Thursday March 30, 2023 @03:47AM (#35369413)
> there is NO WAY that any of the NATO countries will not ban it immediately

I don't think it's that straight forward. NATO countries, and especially European ones, have a legal system that doens't allow them to just ban a specific company.

MAYBE the NATO countries will start working towards legal amendments that will make it possible to ban it. It definitely won't be immediate.

The governments might ban TikTok's by their employees.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by amelius on Thursday March 30, 2023 @05:13AM (#35369998)
> a legal system that doesn't allow them to just ban a specific company.

Which can be overruled by national security issues, I suppose.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by palata on Thursday March 30, 2023 @06:59AM (#35370776)
I assume that their notion of "national security" is not as broad as in the US. I doubt European countries would take "it's commercially competing with Facebook" as a national security threat.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by pelorat on Thursday March 30, 2023 @06:36AM (#35370608)
NATO is not a political organization (I know Turkey didn't get the message, but still).
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by DuckFeathers on Saturday April 01, 2023 @04:58PM (#35404002)
Yeah yeah. It just takes protection money to protect the people.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by dbbk on Thursday March 30, 2023 @09:34AM (#35372463)
TikTok passes the GDPR in Europe because they don't actually do anything bad with user data
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by KennyBlanken on Thursday March 30, 2023 @01:24AM (#35368415)
> In this case, TikTok isn't even doing anything illegal as far as we know, because the United States has basically no data privacy laws that would be relevant here in the first place. The solution to that problem isn't to ban TikTok, it's to create a regulatory framework where companies are obligated to follow certain rules.

That's the thing: TikTok is basically state-sponsored, Apple/Google approved spyware. I don't have a link handy, but I remember reading that security researchers found the tiktok android binary had the capability to receive code remotely and execute it, meaning that the CCP can make millions of Android phones do whatever they want, especially if the code uploaded includes exploits.

But how do you legislate against that sort of thing? Especially when Congress demonstrates how tech illiterate it is?

It's also clearly being used to attack our society and infrastructure via children with poor judgement and little to fear from our criminal justice system. The platform does not not moderate in the slightest any of the various "tiktok challenges", most of which are dangerous to both the participant and general public, as well as causing lots of expensive damage. They could block or de-emphasize any number of the tags used in these "challenges", but instead they seem to boost them.

So we have kids sticking forks into electrical sockets in their classrooms and destroying the bathrooms, breaking into Kias and joyriding them at insanely dangerous speeds, purposefully causing people to fall in the most dangerous way possible (kicking their feet out from under them so the brain's natural protective instincts can't protect the head from trauma)...the list just goes on and on.

Did anyone notice that damn near every single one of these tiktok challenges seems almost perfectly tailored to cause a lot of damage or injury, and utilizes a population which essentially has nothing to fear from criminal repercussions thanks to our criminal justice system sealing their records once they come of age?

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by 27fingies on Thursday March 30, 2023 @01:34AM (#35368491)
> the tiktok android binary had the capability to receive code remotely and execute it

you mean like a browser?

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by schmuelio on Thursday March 30, 2023 @08:11AM (#35371399)
Like basically every browser-based app, so electron apps as well as most android apps.

From my understanding iPhone apps work slightly differently but I sincerely doubt that it's not common place in that space as well.

I'm not saying that it's definitely completely fine, but it _is_ really common in that space.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by aardvarkr on Thursday March 30, 2023 @09:21AM (#35372260)
Like an app that can update itself over the air
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by killingtime74 on Thursday March 30, 2023 @01:41AM (#35368537)
Are there social media moderation laws? No? Then maybe start there. Because you can ban Tik Tok and tomorrow I can start TokTok and do the same thing legally.

The only result is the government has been used to eliminate a competitor to Facebook, who cannot compete in the marketplace. Doesn't sound like protecting kids is the goal here.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by tuwtuwtuwtuw on Thursday March 30, 2023 @06:25AM (#35370520)
> Because you can ban Tik Tok and tomorrow I can start TokTok and do the same thing legally.

For that to be a relevant argument you would have to amass some relevant user base. I wish you good luck.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by palata on Thursday March 30, 2023 @07:01AM (#35370795)
> I can start TokTok and do the same thing legally.

Isn't that the whole idea here? I mean, with TokTok being a US company, obviously.

> Doesn't sound like protecting kids is the goal here.

Indeed.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by tdeck on Thursday March 30, 2023 @01:40AM (#35368526)
> but I remember reading that security researchers found the tiktok android binary had the capability to receive code remotely and execute it,

This is a pretty normal thing in Android and a number of larger apps (and many games) use it to some extent as a way to modularize the application. An app can basically download dex files or other artifacts, load them, and execute them from within the app's process. While it's arguably not a good feature for the platform to have, this isn't necessarily some kind of diabolical hack.

The newer version of this is on-demand dynamic modules (which are hosted by Google), unfortunately I'm drawing a blank recalling what the older DIY version was called.

https://developer.android.com/codelabs/on-demand-dynamic-del...

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by hsbauauvhabzb on Thursday March 30, 2023 @01:51AM (#35368598)
Does this permit out of band code execution, or does it require google or similar pre-cache any code to be executed? The latter is still a significant benefit over the former, as it guarantees non-targeted code deployment (at least if you trust the App Store)

Edit: and revocation.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by tdeck on Thursday March 30, 2023 @04:22AM (#35369634)
The android platform lets you download code from anuwhere and sideliad it into your app (IIRX Unity can do this for you, for example). The thing I linked to does require you to upload to Play because I can't recall if there's a name for the DIY version.

Either way if the app itself is pulled any code downloaded is running within the app, so it goes away too.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by LordDragonfang on Thursday March 30, 2023 @01:39AM (#35368521)
>the tiktok android binary had the capability to receive code remotely and execute it

So can your web browser. Unless you can actually provide a source here to clarify, you're spreading baseless speculation. Even if the CCP were literally controlling tiktok, it would be stupid of them to turn it into literal malware for a few moments of... what, exactly? And in doing so destroy the most popular social media app of its generation that literally every social app is trying to copy and catch up to.

The CCP aren't cartoon villains.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by hsbauauvhabzb on Thursday March 30, 2023 @01:49AM (#35368583)
You wouldn’t do that at scale unless you were basically going to war anyway.

Scenario 1: deploy malware on highly targeted devices

Scenario 2: deploy ddos logic or similar to all devices within a region

Interpret this as ‘what could happen in theory’ as opposed to any TikTok specific accusation. I’m not even sure it is possible to dynamically execute code under Android or iOS.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by sudosysgen on Thursday March 30, 2023 @12:05PM (#35374899)
You can dynamically execute code on Android. Not on iOS, as far as I am aware. It's a pretty common design pattern for games, for example.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by schmuelio on Thursday March 30, 2023 @08:16AM (#35371454)
I don't know if there's been new stuff about it recently, but there's a good chance this is just sourced from a single reddit post that says they decompiled the app and found "loads of dodgy security problems just trust me"

I haven't found a source for this that doesn't trace back to this one reddit post.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by mxkopy on Thursday March 30, 2023 @01:39AM (#35368518)
> It's also clearly being used to attack our society and infrastructure via children with poor judgement and little to fear from our criminal justice system.

If only we had a system which taught children how to make better decisions. Some sort of teachery, perhaps. Maybe we should focus on investing in such places before laying the blame on what is basically Vine 2.0.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by warent on Thursday March 30, 2023 @01:45AM (#35368565)
You know what happens when you ban a young person from doing something? They grow resentful and sympathize with the bad thing. If you shelter a young person, they leave and may never return.

Banning Tiktok would be the biggest strategic miscalculation I've ever seen. Basically every Gen Z and half of the millennials will hate the US Govt and sympathize with Tiktok, by extension sympathize with China.

Before we flail around hastily trying to shove some ham-fisted laws down our young people, because the immortal warmongering bigoted cockroaches who run this country don't understand how the internet series of tubes works, we should consider very carefully how damaging this will be to our young people's loyalty to the US.

If the government is unqualified to make the correct laws, they need to work with people smarter than themselves or step aside, because the consequences of this will be catastrophically worse than stupid dangerous "challenges" which exist outside of Tiktok anyway and have since long before the internet.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by staticman2 on Thursday March 30, 2023 @02:13AM (#35368737)
You've made an argument that I've seen a bunch of times here. It's a rhetorical argument that goes like this, the content is fairly irrelevent:

"Combating [bad thing] actually helps [bad thing]. You see, [bad thing] becomes forbidden fruit when people combat it, and everyone is drawn to forbidden fruit.

If you really are concerned about [bad thing] let [bad thing] be unopposed. Let [bad people] do [bad thing].

It's not an argument I find particularly convincing. A cynic might think it allows the person making it to seemingly support [bad thing] without, you know, putting their actually opinion out there that they in fact like [bad thing].

As for the specifics of your argument, within a few months to a year I would expect Millennials to not really give a crap that Tiktok is gone- they would simply move to a Tiktok clone, it would be as uninteresting as WB channel becoming the CW channel.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by warent on Thursday March 30, 2023 @02:20AM (#35368787)

  Combating [bad thing] actually helps [bad thing].
That was never said nor do I hold that stance.

  If you really are concerned about [bad thing] let [bad thing] be unopposed. Let [bad people] do [bad thing].
That was never said nor do I hold that stance.

You must have accidentally replied to the wrong comment.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by staticman2 on Thursday March 30, 2023 @02:55AM (#35369033)
I read your post as arguing banning Tiktok would help the CCP.

It strikes me as a fairly straightforward form of "Combating [bad thing] (CCP in this case) actually helps [bad thing]."

It's true you never said CCP should go unopposed. I will concede, since I don't know you, it is possible someone could propose a way to deal with the threat of Tiktok/ CCP that wouldn't result in you once again saying "actually, your proposal to combat CCP would actually help CCP."

Maybe you can help me out. If banning Tiktok would not result in Millennials turning traitor would you support it?

Or are you actually against banning Tiktok for some other undisclosed reason?

Like maybe you think the free market should decide?

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by warent on Thursday March 30, 2023 @03:13AM (#35369173)
It's beyond me why you're so desperately trying to attribute and/or uncover some hidden additional meaning to my comment.

Like everyone, Ive many opinions and views. Some of mine are that we're being exploited by China, and our government is failing to advocate for us properly, covering their failures with these trash bills. I've all kinds of ideas of alternatives, to more effectively protect the US.

None of that was part of what I wanted to discuss. My comment was simply that tiktok shouldn't be banned, and I gave one reason why. Full stop. Your imagination is running wild beyond that.

There are many excellent comments and views that I agree with which provide alternatives, for example https://news.ycombinator.com/item?id=35368537

Consult the others here for more discussion on these things, they're smarter than me and I have no interest in discussing further with you.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by staticman2 on Thursday March 30, 2023 @10:39AM (#35373362)
So a poster said

"Are there social media moderation laws? No? Then maybe start there."

with no further elaboration on what a "social media moderation law" should entail and how such a "social media moderation law" could effectively offer a solution and your take away was:

1) This was a serious proposal.

and

2) that 47 word post is an "excellent comment" that reflects what it looks like when a smart person attempts to solve a problem.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by tuwtuwtuwtuw on Thursday March 30, 2023 @06:24AM (#35370506)
> You must have accidentally replied to the wrong comment.

Nope, you are well aware that he replied to the correct comment. The above reply or yours is really arguing in bad faith.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by lenkite on Thursday March 30, 2023 @02:52AM (#35369010)
I sincerely thank you for providing a terrific, well-worded and practical example of what is known as "THE STRAWMAN ARGUMENT". Can use your valuable contribution to educate people on logic fallacies.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by aryanmann on Thursday March 30, 2023 @04:27AM (#35369662)
I'm not sure I agree about the conspiratorial nature of challenges. Challenges have been an artifact of popular social media since challenges started on YouTube, then Vine, and now TikTok. To say that TikTok challenges: (1) occur at a higher/worrying frequency (2) are designed to cause injury and destruction via an army of minors and (3) are "heated" up by TikTok, is a bold claim which at least anecdotally seems ridiculous.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by benmmurphy on Thursday March 30, 2023 @08:59AM (#35371958)
A large number of popular apps in the iPhone App Store have the ability to receive code remotely and execute it. I think this is especially common for games that will often use a scripting language to implement the game and then will push soft updates using the scripting language. But:

1) do you think apple limits what functions these scripting languages can access? 2) do you think apple audits the scripting language to ensure it cannot execute native code via an exploit? for example a lot of Lua runtimes are 'broken' and its trivial to get native code execution.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by staticman2 on Thursday March 30, 2023 @01:54AM (#35368616)
How is this unprecedented? It's not legal for a U.S. person to do business with a North Korea company.

If North Korea had social network companies, or someone in North Korea wanted to start one, they are already banned.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by raxxorraxor on Thursday March 30, 2023 @05:20AM (#35370046)
To me this just sound like they are sad that they lost access to user information because users switched from domestic platforms.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by xeromal on Thursday March 30, 2023 @08:06AM (#35371337)
TikTok's servers are still in the USA so the NSA still has the ability to snoop. I assume they're annoyed that after it hits US servers, it's exfilled into china.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by baby on Thursday March 30, 2023 @10:28AM (#35373208)
I don't think they care about that, I think they care about banning a Chinese app because China is not playing fair with American apps.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by sharperguy on Thursday March 30, 2023 @10:55AM (#35373593)
Sounds more like it's just all an excuse to ring in this bill that actually has nothing to do with TikTok.

It's a mix of "kids these days", "our devices are brainwashing us" and "scary china" to stop you asking questions about what it's really about.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by cultureswitch on Thursday March 30, 2023 @08:15AM (#35371437)
The entire problem is that the US lacks even the most basic privacy laws.

The thing is, it seems some people want to allow US companies to abuse people's data, but not Chinese companies doing the exact same thing.

That is, the aim of this legislation is purely strategic and has nothing to do with privacy.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by onlyrealcuzzo on Thursday March 30, 2023 @10:34AM (#35373290)
> The entire problem is that the US lacks even the most basic privacy laws.

Probably because we never needed to.

There hasn't been a major Internet company being used by western citizens until TikTok.

The US government has been able get data whenever it wants it from the major tech companies because they've all been in the US - and there's been no reason to worry these companies are giving US data to foreign (especially non-friendly) governments.

Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by pessimizer on Thursday March 30, 2023 @10:51AM (#35373529)
China isn't the reason the US needs basic privacy laws.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by potency on Thursday March 30, 2023 @02:04PM (#35376734)
The US has privacy enshrined in the highest law of the land, the 4th Amendment to the US Constitution. The problem is that the courts have eroded the meaning and allowed loopholes in the name of "national security", which itself is a term that has been perverted.
Re:TikTok Ban Bill Is Patriot Act 2.0 Trojan Horse by somethingreen on Thursday March 30, 2023 @01:07PM (#35375906)
It has little to do with privacy - it's about adversary controlling a Skinner box which millions of your citizens have willingly put themselves in. It's just, how do you encode that into law? So privacy it is.