Why TikTok’s security risks keep raising fears

The TikTok logo is displayed on signage outside the social media app's company offices in Culver City, California, on March 16, 2023. (AFP)
Short Url
Updated 17 March 2023
Follow

Why TikTok’s security risks keep raising fears

  • In 2020, then-President Donald Trump sought to force ByteDance to sell off its US assets and ban TikTok from app stores
  • Courts blocked the effort, and President Joe Biden rescinded Trump’s orders but ordered an in-depth study of the issue

TikTok is once again fending off claims that its Chinese parent company, ByteDance, would share user data from its popular video-sharing app with the Chinese government, or push propaganda and misinformation on its behalf.
China’s Foreign Ministry on Wednesday accused the United States itself of spreading disinformation about TikTok’s potential security risks following a report in the Wall Street Journal that the Committee on Foreign Investment in the US — part of the Treasury Department — was threatening a US ban on the app unless its Chinese owners divest their stake.
So are the data security risks real? And should users be worried that the TikTok app will be wiped off their phones?
Here’s what to know:
What are the concerns about TikTok?
Both the FBI and the Federal Communications Commission have warned that ByteDance could share TikTok user data — such as browsing history, location and biometric identifiers — with China’s authoritarian government.
A law implemented by China in 2017 requires companies to give the government any personal data relevant to the country’s national security. There’s no evidence that TikTok has turned over such data, but fears abound due to the vast amount of user data it, like other social media companies, collects.
Concerns around TikTok were heightened in December when ByteDance said it fired four employees who accessed data on two journalists from Buzzfeed News and The Financial Times while attempting to track down the source of a leaked report about the company.
How is the US responding?
White House National Security Council spokesperson John Kirby declined to comment when asked Thursday to address the Chinese foreign ministry’s comments about TikTok, citing the review being conducted by the Committee on Foreign Investment.
Kirby also could not confirm that the administration sent TikTok a letter warning that the US government may ban the application if its Chinese owners don’t sell its stake but added, “we have legitimate national security concerns with respect to data integrity that we need to observe.”
In 2020, then-President Donald Trump and his administration sought to force ByteDance to sell off its US assets and ban TikTok from app stores. Courts blocked the effort, and President Joe Biden rescinded Trump’s orders but ordered an in-depth study of the issue. A planned sale of TikTok’s US assets was also shelved as the Biden administration negotiated a deal with TikTok that would address some of the national security concerns.
In Congress, US Sens. Richard Blumenthal and Jerry Moran, a Democrat and a Republican, wrote a letter in February to Treasury Secretary Janet Yellen urging the Committee on Foreign Investment panel, which she chairs, to “swiftly conclude its investigation and impose strict structural restrictions” between TikTok’s American operations and ByteDance, including potentially separating the companies.
At the same time, lawmakers have introduced measures that would expand the Biden administration’s authority to enact a national ban on TikTok. The White House has already backed a Senate proposal that has bipartisan support.
How has TikTok already been restricted?
On Thursday, British authorities said they are banning TikTok on government-issued phones on security grounds, following similar moves by the European Union’s executive branch, which temporarily banned TikTok from employee phones. Denmark and Canada have also announced efforts to block it on government-issued phones.
Last month, the White House said it would give US federal agencies 30 days to delete TikTok from all government-issued mobile devices. Congress, the US armed forces and more than half of US states had already banned the app.
What does TikTok say?
TikTok spokesperson Maureen Shanahan said the company was already answering security concerns through “transparent, US-based protection of US user data and systems, with robust third-party monitoring, vetting, and verification.”
In June, TikTok said it would route all data from US users to servers controlled by Oracle, the Silicon Valley company it chose as its US tech partner in 2020 in an effort to avoid a nationwide ban. But it is storing backups of the data in its own servers in the US and Singapore. The company said it expects to delete US user data from its own servers, but it has not provided a timeline as to when that would occur.
TikTok CEO Shou Zi Chew is set to testify next week before the House Energy and Commerce Committee about the company’s privacy and data-security practices, as well as its relationship with the Chinese government.
Meanwhile, TikTok’s parent company ByteDance has been trying to position itself as more of an international company — and less of a Chinese company that was founded in Beijing in 2012 by its current chief executive Liang Rubo and others.
Theo Bertram, TikTok’s vice president of policy in Europe, said in a Tweet Thursday that ByteDance “is not a Chinese company.” Bertram said its ownership consists of 60 percent by global investors, 20 percent employees and 20 percent founders. Its leaders are based in cities like Singapore, New York, Beijing and other metropolitan areas.
Are the security risks legitimate?
It depends on who you ask.
Some tech privacy advocates say while the potential abuse of privacy by the Chinese government is concerning, other tech companies have data-harvesting business practices that also exploit user information.
“If policy makers want to protect Americans from surveillance, they should advocate for a basic privacy law that bans all companies from collecting so much sensitive data about us in the first place, rather than engaging in what amounts to xenophobic showboating that does exactly nothing to protect anyone,” said Evan Greer, director of the nonprofit advocacy group Fight for the Future.
Karim Farhat, a researcher with the Internet Governance Project at Georgia Tech, said a TikTok sale would be “completely irrelevant to any of the alleged ‘national security’ threats” and go against “every free market principle and norm” of the state department’s Internet freedom principles.
Others say there is legitimate reason for concern.
People who use TikTok might think they’re not doing anything that would be of interest to a foreign government, but that’s not always the case, said Anton Dahbura, executive director of the Johns Hopkins University Information Security Institute. Important information about the United States is not strictly limited to nuclear power plants or military facilities; it extends to other sectors, such as food processing, the finance industry and universities, Dahbura said.
Is there precedence for banning tech companies?
Last year, the US banned the sale of communications equipment made by Chinese companies Huawei and ZTE, citing risks to national security. But banning the sale of items could be more easily done than banning an app, which is accessed through the web.
Such a move might also go to the courts on grounds that it might violate the First Amendment as some civil liberties groups have argued.


WhatsApp being used to target Palestinians through Israel’s Lavander AI system

Updated 1 min 13 sec ago
Follow

WhatsApp being used to target Palestinians through Israel’s Lavander AI system

  • Targets’ selection based on membership to some WhatsApp groups, new report reveals
  • Accusation raises questions about app’s privacy and encryption claims

LONDON: WhatsApp is allegedly being used to target Palestinians through Israel’s contentious artificial intelligence system, Lavender, which has been linked to the deaths of Palestinian civilians in Gaza, recent reports have revealed.

Earlier this month, Israeli-Palestinian publication +972 Magazine and Hebrew-language outlet Local Call published a report by journalist Yuval Abraham, exposing the Israeli army’s use of an AI system capable of identifying targets associated with Hamas or Palestinian Islamic Jihad.

This revelation, corroborated by six Israeli intelligence officers involved in the project, has sparked international outrage, as it suggested Lavender has been used by the military to target and eliminate suspected militants, often resulting in civilian casualties.

In a recent blog post, software engineer and activist Paul Biggar highlighted Lavender’s reliance on WhatsApp.

He pointed out how membership in a WhatsApp group containing a suspected militant can influence Lavender’s identification process, highlighting the pivotal role messaging platforms play in supporting AI targeting systems like Lavender.

“A little-discussed detail in the Lavender AI article is that Israel is killing people based on being in the same WhatsApp group as a suspected militant,” Bigger wrote. “There’s a lot wrong with this.”

He explained that users often find themselves in groups with strangers or acquaintances.

Biggar also suggested that WhatsApp’s parent company, Meta, may be complicit, whether knowingly or unknowingly, in these operations.

He accused Meta of potentially violating international humanitarian law and its own commitments to human rights, raising questions about the privacy and encryption claims of WhatsApp’s messaging service.

The revelation is just the latest of Meta’s perceived attempts to silence pro-Palestinian voices.

Since before the beginning of the conflict, the Menlo Park giant has faced accusations of double standards favoring Israel.

In February, the Guardian revealed that Meta was considering the expansion of its hate speech policy to the term “Zionist.”

More recently, Meta quietly introduced a new feature on Instagram that automatically limits users’ exposure to what it deems “political” content, a decision criticized by experts as a means of systematically censoring pro-Palestinian content.

Responding to requests for comment, a WhatsApp spokesperson said that the company could not verify the accuracy of the report but assured that “WhatsApp has no backdoors and does not provide bulk information to any government.”


Eastern European mercenaries suspected of attacking Iranian journalist Pouria Zeraati

Updated 19 April 2024
Follow

Eastern European mercenaries suspected of attacking Iranian journalist Pouria Zeraati

  • UK security services believe criminal proxies with links to Tehran carried out London knife attack

LONDON: Police said on Friday that a group of Eastern European mercenaries is suspected to have carried out the knife attack on Iranian journalist Pouria Zeraati in late March.

Zeraati was stabbed repeatedly by three men in an attack outside his south London home.

The Iran International presenter lost a significant amount of blood and was hospitalized for several days. He has since returned to work, but is now living in a secure location.

Iran International and its staff have faced repeated threats, believed to be linked to the Iranian regime, which designated the broadcaster as a terrorist organization for its coverage of the 2022 protests.

Iran’s charge d’affaires, Seyed Mehdi Hosseini Matin, denied any government involvement in the attack on Zeraati.

Investigators revealed that the suspects fled the UK immediately after the incident, with reports suggesting they traveled to Heathrow Airport before boarding commercial flights to different destinations.

Police are pursuing leads in Albania as part of their investigation.

Counterterrorism units and Britain’s security services leading the inquiry believe that the attack is another instance of the Iranian regime employing criminal proxies to target its critics on foreign soil.

This method allows Tehran to maintain plausible deniability and avoids raising suspicions when suspects enter the country.

Zeraati was attacked on March 29 as he left his home home to travel to work. His weekly show serves as a source of impartial and uncensored news for many Iranians at home and abroad.

In an interview with BBC Radio 4’s “Today” program this week, Zeraati said that while he is physically “much better,” mental recovery from the assault “will take time.”


Court orders release of prominent Palestinian professor suspected of incitement

Updated 19 April 2024
Follow

Court orders release of prominent Palestinian professor suspected of incitement

  • Nadera Shalhoub-Kevorkian was under investigation after questioning Hamas atrocities, criticizing Israel
  • Insufficient justification for arrest, says court
  • Detention part of a broader campaign, says lawyer

LONDON: The prominent Hebrew University of Jerusalem professor, Nadera Shalhoub-Kevorkian, was released on Friday after a court order rejected police findings.

The criminologist and law professor was arrested the previous day on suspicion of incitement. She had been under investigation for remarks regarding the Oct. 7 attacks by Hamas and for saying Israelis were committing “genocidal crimes” in the Gaza Strip and should fear the consequences.

On Friday, the court dismissed a police request to extend her remand, citing insufficient justification for the arrest, according to Hebrew media reports.

Protesters gathered outside the courthouse to demonstrate against Shalhoub-Kevorkian’s arrest.

Israeli Channel 12, which first reported the news, did not specify where Shalhoub was arrested but her lawyer later confirmed she was apprehended at her home in the Armenian Quarter of Jerusalem.

“She’s not been in good health recently and was arrested in her home,” Alaa Mahajna said. “Police searched the house and seized her computer and cellphone, [Palestinian] poetry books and work-related papers.”

Mahajna described Shalhoub-Kevorkian’s arrest as part of a broader campaign against her, which has included numerous threats to her life and of violence. 

The professor was suspended by her university last month after calling for the abolition of Zionism and suggesting that accounts of sexual assault during the Hamas-led attacks on Israel were fabricated.

The suspension was initially criticized by the university community as a blow to academic freedom in Israel. However, the decision was later reversed following an apology from Shalhoub-Kevorkian and an admission that sexual assaults took place.

Since hostilities began last year, numerous dissenting voices in Israel have faced arrest for expressing solidarity with victims of the bombardment in Gaza.

In October, well-known ultra-Orthodox Israeli journalist Israel Frey was forced into hiding following a violent attack on his home.

Bayan Khateeb, a student at the Technion-Israel Institute of Technology, was arrested last year for incitement after posting an Instagram story showing the preparation of a popular spicy egg dish with the caption: “We will soon be eating the victory shakshuka.”


Sony, Apollo discuss joint bid for Paramount, says source

Updated 19 April 2024
Follow

Sony, Apollo discuss joint bid for Paramount, says source

  • Paramount is already in an exclusive deal with Skydance Media over possible merger

LONDON: Sony Pictures Entertainment and Apollo Global Management are discussing making a joint bid for Paramount Global, according to a person familiar with the matter.
The companies have yet to approach Paramount, which is in exclusive deal talks with Skydance Media, an independent studio led by David Ellison, though some investors have urged Paramount to explore other options.
The competing bid, which is still being structured, would offer cash for all outstanding Paramount shares and take the company private, the source said.
Sony would hold a majority stake in the joint venture and operate the media company, and its library of films, including such classics as “Star Trek,” “Mission:Impossible” and “Indiana Jones,” and television characters like SpongeBob SquarePants, according to the source.
Sony Pictures Entertainment Chairman Tony Vinciquerra, a veteran media executive with deep experience in film and television, would likely run the studio and take advantage of Sony’s marketing and distribution.
Apollo would likely assume control of the CBS broadcast network and its local television stations, because of restrictions on foreign ownership of broadcast stations, the source said. Sony’s parent corporation is headquartered in Tokyo.
The New York Times first reported the Sony-Apollo discussions. Paramount and Sony declined comment. Apollo could not be reached for comment.
The private equity firm previously made a $26 billion offer to buy Paramount Global, whose enterprise value at the end of 2023 was about $22.5 billion.
A special committee of Paramount’s board elected to continue with its advanced deal talks with Skydance, rather than chase a deal “that might not actually come to fruition,” said two people with knowledge of the board’s action.
The board committee is evaluating the possible acquisition of the smaller independent studio in a stock deal worth $4 billion to $5 billion.
Skydance is negotiating separately to acquire National Amusements, a company that holds the Redstone family’s controlling interest in Paramount, according to a person familiar with the deal terms. That transaction is contingent upon a Skydance-Paramount merger.


Meta releases beefed-up AI models, eyes integration into its apps

Updated 19 April 2024
Follow

Meta releases beefed-up AI models, eyes integration into its apps

  • AI model Llama 3 takes step towards human-level intelligence, Meta claims
  • Company also announced new AI Assistant integration into its major social media apps

SAN FRANCISCO: Meta on Thursday introduced an improved AI assistant built on new versions of its open-source Llama large language model.
Meta AI is smarter and faster due to advances in the publicly available Llama 3, the tech titan said in a blog post.
“The bottom line is we believe Meta AI is now the most intelligent AI assistant that you can freely use,” Meta co-founder and chief executive Mark Zuckerberg said in a video on Instagram.
Being open source means that developers outside of Meta are free to customize Llama 3 as they wish and the company may then incorporate those improvements and insights in an updated version.
“We’re excited about the potential that generative AI technology can have for people who use Meta products and for the broader ecosystem,” Meta said.
“We also want to make sure we’re developing and releasing this technology in a way that anticipates and works to reduce risk.”
That effort includes incorporating protections in the way Meta designs and releases Llama models and being cautious when it adds generative AI features to Facebook, Instagram, WhatsApp, and Messenger, according to Meta.
“We’re also making Meta AI much easier to use across our apps. We built it into the search box right at the top of WhatsApp, Facebook, and Instagram messenger, so any time you have a question, you can just ask it right there,” said Zuckerberg in the video.
AI models, Meta’s included, have been known to occasionally go off the rails, giving inaccurate or bizarre responses in episodes referred to as “hallucinations.”
Examples shared on social media included Meta AI claiming to have a child in the New York City school system during an online forum conversation.


Meta AI has been consistently updated and improved since its initial release last year, according to the company.
“Meta’s slower approach to building its AI has put the company behind in terms of consumer awareness and usage, but it still has time to catch up,” said Sonata Insights chief analyst Debra Aho Williamson.
“Its social media apps represent a massive user base that it can use to test AI experiences.”
By weaving AI into its family of apps, Meta will quickly get features powered by the technology to billions of people and benefit from seeing what users do with it.
Meta cited the example of refining the way its AI answers prompts regarding political or social issues to summarize relevant points about the topic instead of offering a single point of view.
Llama 3 has been tuned to better discern whether prompts are innocuous or out-of-bounds, according to Meta.
“Large language models tend to overgeneralize, and we don’t intend for it to refuse to answer prompts like ‘How do I kill a computer program?’ even though we don’t want it to respond to prompts like ‘How do I kill my neighbor?’,” Meta explained.
Meta said it lets users know when they are interacting with AI on its platform and puts visible markers on photorealistic images that were in fact generated by AI.
Beginning in May, Meta will start labeling video, audio, and images “Made with AI” when it detects or is told content is generated by the technology.
Llama 3, for now, is based in English but in the coming months Meta will release more capable models able to converse in multiple languages, the company said.