Suositeltavia TikTok-kanavia

[Tuomas Tähti]

TikTok on lyhyiden videoiden julkaisemiseen ja katselemiseen tarkoitettu mobiilisovellus, jonka suosio on kasvanut merkittävästi viimeisimpien kahden ja puolen vuoden aikana. Myös selainversio on olemassa.

Avaan nyt viestiketjun, jossa Hommaforumin väki voi suositella kansallismielisten, konservatiivisten tai isänmaallisten toimijoiden TikTok-kanavia.

Aloitan itse suosittelemalla kolmea kanavaa:

Sebastian Tynkkynen
kansanedustaja, entinen kaupunginvaltuutettu (ps.)
https://www.tiktok.com/@sebastiantynkkynen

Juha Karjalainen
PS-Nuorten entinen varapuheenjohtaja, kansanedustajaehdokas v. 2019
https://www.tiktok.com/@juhakarjalainen

Miko Bergbom
perussuomalainen some-osaaja
https://www.tiktok.com/@mikobergbom

---

EDIT:
Minun käyttäjätunnukseni TikTokissa on: nationalisti

[Michael in memoriam]

Itse en suosittelisi kenenkään kansallismielisen käyttävän Kiinan Kommunistisen Puolueen vakoiluohjelmaa/'äppsiä', mutta toki kukin vaikuttakoon yhteiskunnassa haluamallaan tavalla.

TikTok is a data collection service that is thinly-veiled as a social network. If there is an API to get information on you, your contacts, or your device... well, they're using it.

Phone hardware (cpu type, number of course, hardware ids, screen dimensions, dpi, memory usage, disk space, etc)
Other apps you have installed (I've even seen some I've deleted show up in their analytics payload - maybe using as cached value?)
Everything network-related (ip, local ip, router mac, your mac, wifi access point name)
Whether or not you're rooted/jailbroken

Some variants of the app had GPS pinging enabled at the time, roughly once every 30 seconds - this is enabled by default if you ever location-tag a post IIRC
They set up a local proxy server on your device for "transcoding media", but that can be abused very easily as it has zero authentication

The scariest part of all of this is that much of the logging they're doing is remotely configurable, and unless you reverse every single one of their native libraries (have fun reading all of that assembly, assuming you can get past their customized fork of OLLVM!!!) and manually inspect every single obfuscated function. They have several different protections in place to prevent you from reversing or debugging the app as well. App behavior changes slightly if they know you're trying to figure out what they're doing. There's also a few snippets of code on the Android version that allows for the downloading of a remote zip file, unzipping it, and executing said binary. There is zero reason a mobile app would need this functionality legitimately.

On top of all of the above, they weren't even using HTTPS for the longest time. They leaked users' email addresses in their HTTP REST API, as well as their secondary emails used for password resets. Don't forget about users' real names and birthdays, too. It was allllll publicly viewable a few months ago if you MITM'd the application.

They provide users with a taste of "virality" to entice them to stay on the platform. Your first TikTok post will likely garner quite a bit of likes, regardless of how good it is.. assuming you get past the initial moderation queue if thats still a thing. Most users end up chasing the dragon. Oh, there's also a ton of creepy old men who have direct access to children on the app, and I've personally seen (and reported) some really suspect stuff. 40-50 year old men getting 8-10 year old girls to do "duets" with them with sexually suggestive songs. Those videos are posted publicly. TikTok has direct messaging functionality.

Here's the thing though.. they don't want you to know how much information they're collecting on you, and the security implications of all of that data in one place, en masse, are fucking huge. They encrypt all of the analytics requests with an algorithm that changes with every update (at the very least the keys change) just so you can't see what they're doing. They also made it so you cannot use the app at all if you block communication to their analytics host off at the DNS-level.

For what it's worth I've reversed the Instagram, Facebook, Reddit, and Twitter apps. They don't collect anywhere near the same amount of data that TikTok does, and they sure as hell aren't outright trying to hide exactly whats being sent like TikTok is. It's like comparing a cup of water to the ocean - they just don't compare.

Osa boldatuista ovat "toimintoja" joita muutkin 'älypuhelinäppsit' keräävät, mutta nuo muutamat takaovet ovat sinällään ihan mielenkiintoisia. Muun muassa Trumpin Valkoinen talo on mahdollisesti aikeissa "estää TikTokin käytön Yhdysvalloissa" (CNN). Tietenkin on myös melko varmaa että tavallisen suomalaisen sukankuluttajan 'älypuhelin' ei kiinnosta ulkovaltojen toimijoita jos kyseessä ei ole suuryrityksen johtoa, valtionhallintoa/virkamiehiä tms., mutta tieto lisää tuskaa ja...

Muoks: ote tuosta CNN:n jutusta varmuuden varaksi:

The United States is "looking at" banning Chinese social media apps, including TikTok, Secretary of State Mike Pompeo said Monday.
Pompeo suggested the possible move during an interview with Fox News' Laura Ingraham, adding that "we're taking this very seriously."
Pompeo was asked by Ingraham whether the United States should be considering a ban on Chinese social media apps, "especially TikTok."

"With respect to Chinese apps on people's cell phones, I can assure you the United States will get this one right too, Laura," he said. "I don't want to get out in front of the President [Donald Trump], but it's something we're looking at."

Washington's top diplomat added that people should only download the app "if you want your private information in the hands of the Chinese Communist Party."

[Skeptikko]

[tweet]1749016884865830915[/tweet]

Hei auttakaas Uudenmaan piiriä hädässä. Tarvitsemme 1000 seuraajaa liven avaamiseen. Mitä nopeammin, sen parempi. Käy laittamassa seurantaan, jos käytät tiktokkia. Kiitos