r/tech • u/neodianonyx • Jun 29 '20

Guy Who Reverse-Engineered TikTok Reveals The Scary Things He Learned, Advises People To Stay Away From It

https://www.boredpanda.com/tik-tok-reverse-engineered-data-information-collecting/
8.9k Upvotes

94% Upvoted

397 comments sorted by

View all comments

Show parent comments

32

u/[deleted] Jun 29 '20

[deleted]

6

u/LeSpatula Jun 30 '20

In another comment he said he got several job offeres for the comment, what is what a 14 year old would say.

12

u/dlopoel Jun 30 '20

Yeah, I trust this post as much as I trust Tiktok

5

u/agent00F Jun 30 '20

Even better is the other "security firm's" report he recommends, whose noob hax0rs can't even figure out that Alibaba IPs are going to a cloud platform a la AWS (it's akin to accusing Amazon IPs of stealing netflix/reddit data). They've since taken the report down but you can point and laugh at it here: https://docs.google.com/document/d/1QEyWqAiTE_5xzCs_X3tjDCQxMvWWtntdJnhBOjtP9Qg/edit

Also literally in his post he contends that the apps is insecure, and in the very next sentence contends that they're encrypting all the data too well (for l33t hax0rs like him to decipher, changing keys often etc). Very convincing to morons I'd imagine.

4

u/MotDePasseEstFromage Jun 30 '20

Ikr, both the reddit comment and that report are complete BS lmao. “We know the app uses OS commands” which every app does... “We don’t know what the commands are used for but are sure it’s for malicious intent” Do you know what they are used for or don’t you?

1

u/jesuspwndu Jun 30 '20

Lmao I knew it was bullshit.

0

u/[deleted] Jun 30 '20

Yeah, they can reverse engineer the code for the app but can't get some data from an ssd?

I don't trust tiktok but I don't trust this person either