Banning TikTok may undermine personal cyber security
[ad_1]
There has been little discussion of whether TikTok could be banned, and almost no discussion of the cyber security implications of a ban on TikTok, including allowing users to circumvent the ban and access the app with built-in tools. This includes encouraging the security system not to be tampered with.
TikTok is not the first app to be scrutinized for a potential risk to US user data, but it is the first widely used app the US government has proposed to ban over privacy and security concerns Is. So far, the discussion has focused on whether TikTok should be banned.
There has been little discussion of whether TikTok could be banned, and almost no discussion of the cyber security implications of a ban on TikTok, including allowing users to circumvent the ban and access the app with built-in tools. This includes encouraging the security system not to be tampered with. As a cyber security researcher, I see potential risks if the US attempts to ban TikTok. The type of risk depends on the type of restriction.
Blocking TikTok in the network Admittedly, it is possible to block access to TikTok by filtering traffic destined for addresses owned by TikTok, but this would be difficult to accomplish. Server addresses can be changed and the banning of TikTok can turn into a cat and mouse game. Additionally, these types of blocks can be bypassed by using a Virtual Private Network (VPN), which encrypts data flowing between servers and devices.
VPNs can be used to route traffic between servers in other countries and devices in the US VPNs were once widely recommended for people using public Wi-Fi, and people already Are using a VPN to access blocked streaming services. While security experts no longer recommend VPNs for public Wi-Fi, many people have used them and are therefore familiar with a tool that will help them bypass the TikTok ban. DNS sinkholes are another technique that can be used in TikTok ban.
DNS, the Domain Name System, is a network protocol that acts like the phone book of the Internet. Computers need to know the server’s IP address in order to communicate with the server. DNS helps a computer access an address that uses a name convenient for humans to remember, such as www.google.com. DNS sinkholes do not block access to a server directly. Rather, they prevent other computers from being able to find the server’s address. It’s reasonable to think of a DNS sinkhole as someone’s name being removed from the phone book. DNS sinkholes are often used to block objectionable content and advertisements. These can be used in Tiktok ban.
However, DNS sinkholes only work if lookups are limited to DNS servers that are configured as sinkholes. A ban on using DNS sinkholes would cover most of the DNS servers that people’s computers use by default. However, you can relatively easily change the DNS settings on your computer to bypass a restriction based on DNS sinkholes. There are many public DNS servers that people can use in place of their current DNS servers, which are usually maintained by Internet Service Providers.
Blocking TikTok with DNS sinkholes would require significant international cooperation to make it difficult for people to find DNS servers that can access TikTok. Banning Tiktok from your phone Another way to ban Tiktok is by blocking the Tiktok mobile app. This will not affect US users’ ability to access the TikTok website, but will depend on how often people use TikTok.
Blocking the app may address concerns that TikTok may be used without the user’s knowledge to access other systems on a network to which the mobile device is connected. Removing TikTok from the App Store on its own is unlikely to be successful. Both Android and iOS devices have the ability to install apps from alternative sources, a technique known as sideloading. Mobile devices assume that mobile applications are coming from a trusted source. Both Google and Apple audit mobile apps before the app is available for download.
While these reviews are not accurate, they help ensure that the apps do not contain vulnerabilities or malware. When app stores are not involved, the security responsibilities shift. Sideloading makes users responsible for verifying the legitimacy of an app, and criminals can trick users into installing malicious apps from third-party sources. But what about the millions of people who already have TikTok installed on their phones?
Enforcement of the TikTok app ban will likely require that it be removed from mobile devices. Security trade off I think ban on Tiktok will not be technically enforceable. Even China is troubled by content filtering. For all these reasons, the proposed law includes significant penalties for circumventing the ban. Even if the punishment is not aimed at the average TikTok user, this proposed law – aimed at improving cyber security – could lead users to engage in risky digital behaviour.
Disclaimer:IndiaTheNews has not edited this news. This news has been published from PTI-language feed.
[ad_2]
Source link
