Keylogging Controversy Brings TikTok Back Under US Government Scrutiny
Image from Shutterstock

Keylogging Controversy Brings TikTok Back Under US Government Scrutiny

TikTok, the social app that’s so popular that some are using it as a search engine at this point, remains as vital destination as ever for Pink Sauce connoisseurs. Still, the company’s PR headaches continued this week.

Independent research performed by developer Felix Krause found code injected by the social network’s operating system enabling it to monitor all keyboard inputs and tags, even without hitting “submit,” a process known as “keylogging.”


As Krause explained on his blog, this could potentially include recording sensitive information such as passwords and credit card numbers. And because TikTok comes with an internal browser, this functionally gives the app the ability to monitor its users as they browse around third-party websites and services.

TikTok’s certainly not alone in checking out all of your data as you type. A previous post by Krause focused on tracking code within Meta’s Facebook and Instagram iOS apps, allowing them to potentially follow users within in-app browsers as well. A recent survey of the top 100,000 most popular websites found that 1,844 logged an EU user’s email address without their consent, and 2,950 recorded a U.S. user’s email data in some form. The keylogging protocol has also been used as a way for employers to monitor the activity of remote employees.

Though it certainly sounds sinister, keylogging is not necessary by definition malicious. TikTok claims that the code in question is used for “debugging, troubleshooting, and performance monitoring,” and in a statement, a representative denied that the company even collects specific keystroke or text input data. (The company also pointed out similar code in GitHub that’s used for an alternative purpose than keylogging, as a third party example.)

Still, the very mention of privacy concerns and TikTok in the same sentence is enough to raise some eyebrows in the U.S., where the app–which is owned by the Chinese parent company ByteDance–has always operated under a dark cloud of suspicion. Allegations in 2019 that the app was hoovering up data from underage users and censoring content on behalf of China’s ruling Communist Party led to calls for investigations from high-profile politicians. In December of that year, just as TikTok was taking over as the world’s most downloaded app, the U.S. Department of Defense was recommending that all military personnel delete it from their phones.

In 2020, President Trump signed a series of executive orders banning U.S. companies from doing business with TikTok (as well as the Chinese-owned WeChat app). These orders were later reversed by the Biden administration, which nonetheless urged Americans handling sensitive information to consider the apps a “heightened risk.”

The House of Representatives’ Chief Administrative Officer (CAO) echoed these concerns just this week following the keylogging report, issuing a “cyber advisory” about security on TikTok, noting that, despite its Culver City headquarters, it’s still “a Chinese-owned company.”

So even a U.S. government that was initially inclined to be more TikTok friendly may be having second thoughts.

dot.LA VC Sentiment Survey: Investors See Lots of Deals and Hiring Despite Long Return to Normal

Welcome to the first edition of the dot.LA VC Sentiment Survey. Every quarter we're going to be surveying the top VCs in Los Angeles. We asked dozens of partners and top level investors who they thought were the hottest companies and best VCs right now and we will be sharing their opinions in the coming days and weeks.

But we first wanted to know how they are feeling about the startup world and the larger economy at the end of the most tumultuous year of our lifetimes.

Read moreShow less
Ben Bergman

Ben Bergman is the newsroom's senior finance reporter. Previously he was a senior business reporter and host at KPCC, a senior producer at Gimlet Media, a producer at NPR's Morning Edition, and produced two investigative documentaries for KCET. He has been a frequent on-air contributor to business coverage on NPR and Marketplace and has written for The New York Times and Columbia Journalism Review. Ben was a 2017-2018 Knight-Bagehot Fellow in Economic and Business Journalism at Columbia Business School. In his free time, he enjoys skiing, playing poker, and cheering on The Seattle Seahawks.

https://twitter.com/thebenbergman
ben@dot.la
Billion-Dollar Beauty. Billion-Dollar Radios. Only in LA.

🔦 Spotlight

Hello Los Angeles,

This week, LA proved it can scale in silence and shine in the spotlight, sometimes in the same breath.

Read moreShow less
RELATEDTRENDING
LA TECH JOBS
interchangeLA