Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Location

> Location of residence and work, correlating different IP addresses such as if your client device often appears from a certain 'home' IP address during non work hours, and another set of IP addresses during work hours.

> Location of where you go on vacation, and for how long (based on entirely new IP address in some other geographical location)

> Facial recognition data, likely good enough over long term use with enough angles of your face to develop a high confidence model of your uniqueness as a human in the world. Getting even better all the time as front-facing cameras on phones improve in video quality.

> Facial recognition data of any other persons who appear in your videos and where they are in your social graph of contacts.

> Object recognition and categorization of what things appear in the background of your videos, consumer electronics, art, religious symbols, furniture, vehicles, electrical outlet shape (can be used to distinguish geographical location).

> Time of day use/usage patterns

> Social graph of who you're friends with, whose other tiktok clients login from the same netblocks (likely to be in the same residence, etc). Who do you like/follow and who follows you

> Telemetry data from device itself for unique ios or android device fingerprinting

> What content you watch that might be even slightly politically, economically or religiously related and how that content is perceived by Beijing.

> Who and how many and which other people in your social graph watch anything political/business/religious related and all the other data gathered about them.

> How many and which one of your friends have client devices that appear from known VPN exit endpoints or IP addresses that look "suspicious" to data sets used in the back end of the domestic China great firewall. I'd be shocked if they don't collect data when a large % of somebody's friends and social media graph are apparent VPN users.

I could go on.



> Location

Who's going to grant permission location for a video app?

> Facial recognition data

seems plausible, but only if you're producing content, in which case everything you record is already public and tiktok gathering data is the least of your problems. also, at least on ios surreptitiously capturing facial data with front camera is risky because there's a recording indicator displayed by the OS.

> Facial recognition data of any other persons who appear in your videos and where they are in your social graph of contacts.

> Object recognition and categorization of what things appear in the background of your videos, consumer electronics, art, religious symbols, furniture, vehicles, electrical outlet shape (can be used to distinguish geographical location).

Again, only applicable if you're posting content, and if you're posting it, it's presumably public and tiktok is the least of your problems.

> Telemetry data from device itself for unique ios or android device fingerprinting

Given that iphones are basically identical, the only thing you'll be able to extract is "this guy is using an iphone 14 pro", which isn't exactly revealing

> Location of where you go on vacation, and for how long (based on entirely new IP address in some other geographical location)

> Time of day use/usage patterns

> Social graph of who you're friends with, whose other tiktok clients login from the same netblocks (likely to be in the same residence, etc). Who do you like/follow and who follows you

I'm having trouble imagining how these can be used in a nefarious way, or can't otherwise be acquired through other sources.

> Social graph of who you're friends with, whose other tiktok clients login from the same netblocks (likely to be in the same residence, etc). Who do you like/follow and who follows you

> How many and which one of your friends have client devices that appear from known VPN exit endpoints or IP addresses that look "suspicious" to data sets used in the back end of the domestic China great firewall. I'd be shocked if they don't collect data when a large % of somebody's friends and social media graph are apparent VPN users.

okay, and then what? so the next time you visit china they throw you in an reeducation camp? At best this information can be used for determining how much support/opposition the CCP has abroad, but you can just use opinion polls for that. It's not like americans are shy about expressing their hate for the CCP.


Location through IP not location services




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: