Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This whole subject of blocking Tiktok raises the question as to why companies such as Bytedance aren't punished as malicious actors when the data being captured by them is clearly meant for malicious use.

We really should have a way of judging if any data being captured by an app is in good faith or if it is being done in a clearly fraudulent or malicious manner and then punish or shutdown the malicious operators. Tiktok has been proven to be manipulative and also as an arm of the CCP.

However, what about other apps which seem to capture data that makes no sense to them?

For example, if your note taking app is secretly uploading data from your contact list - that should be clearly seen as malicious in comparison to say your e-commerce app storing details about your purchase history made on that app to determine what may be going on with you.

Even the second part is a bit shady but at least you can make a case that it may be just a way to sell more things.

But many apps capture data that cannot make any business sense to the company behind that app other than being something quite malicious - like for example:

- Uber secretly recording your screen on iphone EVEN WHILE the app was NOT EVEN BEING USED using API which Apple conveniently did not disclose to anyone else other than Uber and perhaps other shady operators!

- Chrome caught secretly sending audio transcripts back to the Google servers. Why would a browser need to send audio transcripts by secretly tapping into the microphone?

- Nest using microphones which were only revealed much later. Why would a smoke alarm need audio?

- Why do apps like Whatsapp - even in the web version, secretly take the data from the clipboard (copy buffer)? Why would an app need the data in the clipboard before it is even pasted into it?

Any company capturing or using such data should be required to provide evidence that this data was captured for a legitimate reason - and be punished if they are not able to provide this data with the principals of the company being treated like organized crime operators. Anything else is just pointless.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: