News for hackers. Stuff that matters.

A comment on Montana becomes first US state to ban TikTok. Parent comment

Re:Montana becomes first US state to ban TikTok by groggo on Thursday May 18, 2023 @02:05PM (#35991793)
please speculate. I just don't understand what it would even have access to. Are you worried about it exploiting iOS bugs? Otherwise it should only have explicit access to what I grant, right? No audio, video, files, photos, contacts, location.
[ Parent | on HN ]
Re:Montana becomes first US state to ban TikTok by asynchronous on Thursday May 18, 2023 @02:36PM (#35992238)
Right, in theory iOS should sandbox it. But all the other functionality that’s exposed is probably getting sent over (think ip address, connection settings, iOS OS fingerprint). My guess is most of that data is just a keep-alive c2 style connection with ByteDance. Heaven forbid the CCP develops some iOS zero days and then has a list of every single iOS device that would be vulnerable to it.
[ Parent | on HN ]
Re:Montana becomes first US state to ban TikTok by paulddraper on Thursday May 18, 2023 @04:40PM (#35993746)
> Are you worried about it exploiting iOS bugs?

Yes, or gathering information not blocked.

For example, you don't need iOS permission to get general location information (IP address), or device fingerprint.

[ Parent | on HN ]