TikTok says Trump administration ban is based on fake news about the app and its back end
(2020/10/16)
- Reference: 1602835325
- News link: https://www.theregister.co.uk/2020/10/16/tiktok_rebuts_trump_administration/
- Source link:
TikTok has claimed that the Trump administration’s reasons for wanting it banned are mostly based on incorrect assumptions about its technology.
The claims were made in a [1]supplemental declaration [PDF] filed as part of the made-in-China social network’s [2]legal action seeking to undo the USA’s ban on the app.
Featuring the testimony of TikTok chief security officer Roland Cloutier, the document picks apart some of the USA’s reasons for wanting the app kicked out of the USA unless Oracle takes it over.
Cloutier starts with an assertion by the US Department of Commerce (DoC) in a [3]Memo that TikTok “partially shares” some code and infrastructure with Douyin, the Chinese version of the service.
Not so, Cloutier writes, characterising the software stack for TikTok and Douyin as “entirely separate” and “deployed separately.” Source code and data for TikTok are also managed separately from Douyin.
'Robbery, economic plunder, victim of larcenous cronyism and a heist' [4]READ MORE
The CSO also corrects a DoC point that claims TikTok leases servers from China Unicom’s Americas operations. Not so, he said. TikTok only leases Rackspace and ByteDance owns and operates all of its own servers. China Unicom staff can’t access the cages in which TikTok runs without authorisation. He also reveals that TikTok uses Alibaba, Google, Microsoft and AWS. No wonder Oracle is so happy to be in the box seat to run the service!
An important note: The DoC memo redacts some sections and does not mention China Unicom. TikTok appears to have outed the company as a supplier in this filing.
Cloutier also said that TikTok runs a proprietary operating system and security controls explicitly designed to keep its hosting companies out of its apps and data.
Next up: data transfer to China, which Cloutier shoots down by saying TikTok has cleansed its app of reliance on active Chinese IP addresses. While four Chinese IP addresses remain, two refer to devices in Singapore.
He also explained that TikTok has stopped collecting users’ MAC addresses, only ever did so to detect fraud anyway and only encrypted them to protect users.
China watches 170,000 years’ worth of short videos every day [5]READ MORE
His last point addresses TikTok’s use of the clipboard on iOS devices and says it was only present because Google’s Ads SDK required it but has since been removed. He contends that another use of the clipboard was to validate spam reports that came from copied comments.
TikTok’s filing doesn’t rebut all of the DoC’s assertions about the service. It doesn’t directly address whether China’s government was able to access US users’ data before TikTok moved it onto US soil in February 2019. Nor is Chinese government influence over ByteDance rebutted or contested.
The DoC memo also includes several redactions that could make other allegations that could never come to light.
TikTok’s rebuttal of the memo may yet end up being irrelevant if the Oracle/Walmart acquisition of the app’s operations proceeds. But with president Trump yet to sign off that deal, the US presidential election now less than three weeks away, rhetoric escalating and and many analyses of the deal suggesting it [6]will not get ByteDance entirely out of US citizens’ lives , almost anything could yet happen. ®
Get our [7]Tech Resources
[1] https://regmedia.co.uk/2020/10/16/tiktok_csotestimony.pdf
[2] https://www.theregister.com/2020/09/24/tiktok_files_injunction/
[3] https://regmedia.co.uk/2020/10/16/tiktok_doc_memo.pdf
[4] https://www.theregister.com/2020/09/25/china_state_media_view_of_tiktok_deal/
[5] https://www.theregister.com/2020/10/15/china_short_video_consumption/
[6] https://www.theregister.com/2020/09/16/tiktok_oracle_trump/
[7] https://whitepapers.theregister.com/
The claims were made in a [1]supplemental declaration [PDF] filed as part of the made-in-China social network’s [2]legal action seeking to undo the USA’s ban on the app.
Featuring the testimony of TikTok chief security officer Roland Cloutier, the document picks apart some of the USA’s reasons for wanting the app kicked out of the USA unless Oracle takes it over.
Cloutier starts with an assertion by the US Department of Commerce (DoC) in a [3]Memo that TikTok “partially shares” some code and infrastructure with Douyin, the Chinese version of the service.
Not so, Cloutier writes, characterising the software stack for TikTok and Douyin as “entirely separate” and “deployed separately.” Source code and data for TikTok are also managed separately from Douyin.
'Robbery, economic plunder, victim of larcenous cronyism and a heist' [4]READ MORE
The CSO also corrects a DoC point that claims TikTok leases servers from China Unicom’s Americas operations. Not so, he said. TikTok only leases Rackspace and ByteDance owns and operates all of its own servers. China Unicom staff can’t access the cages in which TikTok runs without authorisation. He also reveals that TikTok uses Alibaba, Google, Microsoft and AWS. No wonder Oracle is so happy to be in the box seat to run the service!
An important note: The DoC memo redacts some sections and does not mention China Unicom. TikTok appears to have outed the company as a supplier in this filing.
Cloutier also said that TikTok runs a proprietary operating system and security controls explicitly designed to keep its hosting companies out of its apps and data.
Next up: data transfer to China, which Cloutier shoots down by saying TikTok has cleansed its app of reliance on active Chinese IP addresses. While four Chinese IP addresses remain, two refer to devices in Singapore.
He also explained that TikTok has stopped collecting users’ MAC addresses, only ever did so to detect fraud anyway and only encrypted them to protect users.
China watches 170,000 years’ worth of short videos every day [5]READ MORE
His last point addresses TikTok’s use of the clipboard on iOS devices and says it was only present because Google’s Ads SDK required it but has since been removed. He contends that another use of the clipboard was to validate spam reports that came from copied comments.
TikTok’s filing doesn’t rebut all of the DoC’s assertions about the service. It doesn’t directly address whether China’s government was able to access US users’ data before TikTok moved it onto US soil in February 2019. Nor is Chinese government influence over ByteDance rebutted or contested.
The DoC memo also includes several redactions that could make other allegations that could never come to light.
TikTok’s rebuttal of the memo may yet end up being irrelevant if the Oracle/Walmart acquisition of the app’s operations proceeds. But with president Trump yet to sign off that deal, the US presidential election now less than three weeks away, rhetoric escalating and and many analyses of the deal suggesting it [6]will not get ByteDance entirely out of US citizens’ lives , almost anything could yet happen. ®
Get our [7]Tech Resources
[1] https://regmedia.co.uk/2020/10/16/tiktok_csotestimony.pdf
[2] https://www.theregister.com/2020/09/24/tiktok_files_injunction/
[3] https://regmedia.co.uk/2020/10/16/tiktok_doc_memo.pdf
[4] https://www.theregister.com/2020/09/25/china_state_media_view_of_tiktok_deal/
[5] https://www.theregister.com/2020/10/15/china_short_video_consumption/
[6] https://www.theregister.com/2020/09/16/tiktok_oracle_trump/
[7] https://whitepapers.theregister.com/
Re: I've said it before.
_LC_
You are very naive, when you think that this is coming from the idiot Trump. Look at all the media support. ;-)
Chris G
SG Trump ay or may not be on hisvway out but he has set precedents that are nto going to go away completely. Whatever colour the next prez has on their lapel, they are all tarred withthe same brush regarding the way the US deals with the rest of the world.
The biggest difference is that previous incumbents have been more or less subtle
I've said it before.
Pull out of the U.S. until after the elections. If the OHSG loses/his E.O.'s get rescinded then you can consider returning. If he wins/his E.O.'s don't get trashed then you won't be in the country for him to fuck with you any longer. Meanwhile you keep up the judicial pressure to get his tantrum overturned/thrown out so you can continue doing business here. You can let all your users know the current situation (why you're moving out of the U.S.) so they can make an informed choice.
TL;DR: Pull out & wait until after the election. Either he goes & you come back or he stays and you'll not be subject to his temper tantrum bullshit any longer.