News: 1679315696

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

BBC to staff: Uninstall TikTok from our corporate kit unless you can 'justify' having it

(2023/03/20)


The world's oldest national broadcaster, the venerable British Broadcasting Corporation, has told staff they shouldn't keep the TikTok app on a BBC corporate device unless there is a "justified business reason."

A Reg reader inside the Beeb told us yesterday's edition of internal staff newsletter Ariel contained some new rules for journalists in the org "based on concerns raised by government authorities worldwide regarding data privacy and security."

The broadcaster didn't clarify whether the corporation's bosses had been briefed specifically about security threat by UK spy bosses or had developed the rule because of last week's [1]ban of the Chinese social media platform on UK.gov devices.

[2]

The UK government is the latest to stop ministers and officials from using TikTok on their work devices as a "precautionary" measure over worries the app is used to snoop on Brits. Yes, this is despite the apparent, er, successes such as former digital secretary Nadine Dorries' toe-curlingly cringey [3]TikTok rap on the subject of the Online Safety Bill. Mic drop indeed.

[4]

[5]

Our source pointed out that although the BBC is "obviously not an arm" of the UK government "(despite what some may claim on social media)", it does try to adhere closely to NCSC security best practice. NCSC is the UK's National Cyber Security Centre, the cyber unit of the country's signals intelligence operations GCHQ.

The source added: "At the same time, as a major global media organisation, [the BBC] has more reason than most government-adjacent organisations to have a presence on TikTok."

[6]

The national broadcaster told staffers in the in-house mag that while they could do what they liked with their personal phones "based on your individual circumstances and data considerations," if the device is a BBC corporate device "and you do not need TikTok for business reasons," they must delete TikTok promptly.

Those unsure of how to remove the app were asked to contact the Beeb's longsuffering technical support and service desk.

[7]Silicon Valley Bank's UK arm bought by HSBC for 1 British pound in rescue deal

[8]No more free love: Netflix expands account sharing restrictions

[9]McDonald's pulls plug on Wi-Fi, starts playing classical music to soothe yobs

[10]India uses emergency powers to order takedown of BBC documentary

[11]Royal Mail, cops probe 'cyber incident' that's knackered international mail

BBC staff with TikTok on their personal phones that they also use for BBC work purposes (holy BYOD policy, Batman) are also told to contact the security tech team, presumably to be given a massive bollocking so someone can "talk to you regarding your individual circumstances and the type of BBC information that you are working with." For the user, that's a brand new smartphone or tablet, for IT, that's a brand new headache.

The Beeb's security tech desk will also have to take a look at staffers' work phones and tablets that are running TikTok on the same device as "sensitive BBC information."

Some "editorial and marketing" types are going to need TikTok, the org admits. Those folks need to speak to IT to "arrange access to an appropriate corporate mobile device." Something appropriately firewalled or configured with MDM software, we imagine.

[12]

The weekend "soft-ban" comes days after a [13]report submitted to Australia's Select Committee on Foreign Interference through Social Media claimed ByteDance, the Chinese developer of TikTok, "can no longer be accurately described as a private enterprise" and is instead intertwined with China's government.

Meanwhile, the US has asked TikTok parent company ByteDance to [14]sell its stake in TikTok or face a possible ban in the country.

A TikTok spokesperson told The Register it was "disappointed with the guidance that the BBC has shared but welcome the fact TikTok can still be used as part of editorial, marketing and reporting purposes."

It added: "The BBC has a strong presence on our platform, with multiple accounts from news through to music reaching our engaged community both in the UK and around the world.... We remain in close dialogue with the BBC and are committed to working with them to address any concerns they have."

It has always denied that it is beholden to China's government, that it would share data with the Chinese government, and that it conducts surveillance via its app.

A BBC spokesperson told The Reg : "The BBC takes the safety and security of our systems, data and people incredibly seriously. We constantly review activity on third party platforms – including TikTok - and will continue to do so." The Beeb also added it wanted to make it clear you can still get your news on TikTok – but added it would continue to monitor and assess the situation.

Did you hear that, kids? You can still stay up to date with fun clips like these excruciatingly long [15]forced portrait-mode TikTok news shots of newsreaders staring down at their notes. Edgy. ®

Get our [16]Tech Resources



[1] https://www.theregister.com/2023/03/16/ukgov_bans_tiktok_from_work_devices/

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZBiRL1NF6zhCXukTXUCXPwAAAAc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://www.youtube.com/watch?v=9ql6tGu9aWg&ab_channel=GuardianNews

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZBiRL1NF6zhCXukTXUCXPwAAAAc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZBiRL1NF6zhCXukTXUCXPwAAAAc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZBiRL1NF6zhCXukTXUCXPwAAAAc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2023/03/13/svb_uk_hsbc/

[8] https://www.theregister.com/2023/02/09/netflix_sharing_restrictions/

[9] https://www.theregister.com/2023/01/31/mcdonalds_classical_music/

[10] https://www.theregister.com/2023/01/24/india_bbc_documentary_emergency_takedown/

[11] https://www.theregister.com/2023/01/11/royal_mail_uk_cyber_incident/

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZBiRL1NF6zhCXukTXUCXPwAAAAc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[13] https://www.theregister.com/2023/03/19/asia_tech_news_roundup/

[14] https://www.cnbc.com/2023/03/16/tiktok-us-threatens-ban-if-chinese-parent-bytedance-doesnt-sell-stake.html

[15] https://www.tiktok.com/@bbcnews

[16] https://whitepapers.theregister.com/



If they want to be consistent..

Anonymous Coward

.. they should ban WhatsApp as well as it copies address books wholesale instead of doing a hashing match.

Re: If they want to be consistent..

big_D

There is an extra version of WhatsApp for Business that does claim to be GDPR compliant.

That said, I've never used it, the whole of Meta resolves to 0.0.0.0 at my gaff.

Re: If they want to be consistent..

cyberdemon

TBH that's Google's fault, since the address book API gives actual contact phone numbers, not hashes.

But then again TikTok collects a hell of a lot more than just phone numbers. It can rifle through all of your documents and downloads if it wants to, because it has "shared storage" permissions. But again it's Google's fault that such a permission is so widely granted in the first place.

Supposing it turned out that Google and Apple were not very privacy-respecting companies either. Should we ban Google and Apple software from all phones?

A great idea if you ask me. I'll revive my old N900.

Re: If they want to be consistent..

Lord Elpuss

Doesn't do that on Apple. I have mine set to Specific Contacts, and Specific Photos/Videos. It's a bit of a pain to manually 'manage' which photos it has access to whenever I want to send something, but at least I'm happy it's not just rifling through willy-nilly.

Maybe time to ditch Android and buy a real phone.

Re: If they want to be consistent..

Lord Elpuss

25 minutes in and only 5 thumbs down; standards are slipping. Come on Fandroids, get voting!!

Re: If they want to be consistent..

big_D

The thing is, the Chinese could probably go to data brokers in the USA and buy more information than they are currently collecting... The whole system is broken.

This is more scapegoating than anything else, there are US companies that collect the information or even more information and sell it openly, but that is fine, because capitalism. But a Chinese company doing the same thing? That is BAD!

That said, banning such apps from company devices should be standard behaviour anyway...

Re: If they want to be consistent..

Anonymous Coward

So they're OK for Google and/or Apple to spy on them (plus whoever is behind a host of other apps) but not TikTok? Despite us knowing that these other sources are collecting data and having no proof that TkTok is any worse.. hmmm.

Personally I'm not a TikTok use so it doesn't effect me but there does seem to be a large element of hypocrisy....

Re: If they want to be consistent..

Alumoi

There's no hypocrisy here. Tiktok is spying for the wrong party, that's all.

Re: If they want to be consistent..

Yet Another Anonymous coward

They can't ban Whatsapp - it's what the cabinet leaks on

Re: If they want to be consistent..

Binraider

It's been a real goldmine of info, hasn't it?!

Re: If they want to be consistent..

VoiceOfTruth

You don't understand. You haven't got with the program. This is not about security. If it was, FaceBook, MS, Google, Instagram, etc, would all be banned. It is about HM Government being good little puppies to their owner the US regime.

SOP

big_D

That has been SOP at every company I've ever worked at.

No private apps on company device, no company apps or data on private devices and never the twain shall meet.

Social media has never been part of an employees normal duties at the companies I've worked at/with either. Apart from, maybe, marketing, none have ever had social media applications on their company devices.

Re: SOP

Korev

My employer is the other way around. Company (i)phones are on a dedicated WiFi network with very few restrictions; the laptops and desktops have their Internet traffic decrypted and scanned. We're instructed to do anything personal on the phones (I guess this avoids liability if an employee looks at the medical or banking records etc).

Is that a firewall icon? -->

Re: SOP

Anonymous Coward

My employer has everyone's phone on a separate wifi that's not monitored and doesn't block spotify etc

The only difference is that corporate doesn't know it has a separate wifi that isn't monitored and doesn't block spotify etc

MDM

Sp1z

Why in hell aren't the BBC using some form of MDM for corporate devices?

This could be over in the time it takes to change a policy or two (10 mins).

Re: MDM

GruntyMcPugh

My thoughts entirely. I inherited managing mobile devices recently, and after this recent round of Tik Tok banning I just had a look at our InTune portal, checked to see if we'd allowed Tik Tok as an App, we hadn't, and thought 'phew' and I was done.

Re: MDM

Franco

It would be over in 10 minutes if it was an IT decision, but the higher-ups will want to create policies and that will take time, particularly given the BBC's recent policy-based issues where freelancers are concerned.

It's banned where I am but already we've had the media/comms teams request an exemption.

Only American companies are allowed to spy on the British

Esoteric Eric

This then allows the British to spy on the Americans

Part of the 5Ballbags solution

Binraider

Stop being a bloody chicken and ban bloody the thing full stop.

It is a hazard to your network security, and if you want cat videos there are other ways to get them.

Yet Another Anonymous coward

But if we criminalise cat videos only criminals will have cat videos

Snooping

VoiceOfTruth

-> worries the app is used to snoop on Brits.

Meanwhile, FaceBook, Google, MS, all continue as though the sun shines out their collective arses.

iron

When can we expect them to ban Facebook, Twitter, Instagram, WhatsQApp (typo but it amuses me so leaving it), Chrome and anything else corrupted by the hand of Zuck, Twitler or Google?

Doctor Syntax

What happens when/if the Online Unsafety Bill becomes law with every device backdoored by HMG? The present situation is going to be looked back on as the halcyon days.

Adults Use TikTok?

Anonymous Coward

I must be really behind the times. Last time I could be bothered to look, TikTox was for children to post dance videos. Why would adults even install it on their work device ?

Re: Adults Use TikTok?

Anonymous Coward

Unfortunately to watch teenagers doing dance videos.

why the hell

Anonymous Coward

Do organisations allow crap like tiktok, twitter, facebook and god only knows how many other garbage apps on user's phones?

Work here, personal there and *never* cross the streams.

To make an enemy, do someone a favor.