Baptiste Robert (fs0c131y)
medium.com/@fs0c131y · Personal blog · on HN since 2018
Baptiste Robert, a French security researcher who goes by fs0c131y, writes about app and service vulnerabilities and data leaks.
What HN saysHN commenters cite his TikTok logs analysis as showing it reports ordinary system specs, and link his Tchap post when discussing French government messaging security.
25HN people shared it
12linked it in comments
16stories submitted
183story points
3 years agolast shared
2018people per year2026
Most-shared posts
- 1TikTok: Logs, Logs, Logs6 people · 131 points · first shared 2020 · 119 comments on HN
- 2Tchap: The super (not) secure app of the French government6 people · 4 points · first shared 2019 · 1 comments on HN
- 3Indane (Gas Company in India) Leaked 6,700,000 Aadhaar Numbers4 people · 9 points · first shared 2019 · discussion on HN
- 4MSFsocket: A Chinese Surveillance Tool3 people · 6 points · first shared 2019 · discussion on HN
- 5Indian Government's Contact Tracing App Has Serious Security Vulnerabilities2 people · 10 points · first shared 2020 · 2 comments on HN
- 6Nothing is safe in a hacker conference: not even the coffee machine2 people · 4 points · first shared 2019 · discussion on HN
- 7How I “found” the database of the Donald Daters App2 people · 2 points · first shared 2018 · discussion on HN
- 8How to brick Samsung phones1 people · 17 points · first shared 2019 · 4 comments on HN
- 9Tchap the super not secure app of the french government 84b31517d1441 people · first shared 2019
What HN people wrote when they linked it
rollschild · 2020-08-07
Let's face it: it has nothing to do with "treat people the way they treat you." It's just Trump trying to win/secure the votes from his loyal supporters.
Does TikTok grab user data and analyze them for ads, recommendations, etc? Sure, so do Instagram. But does TikTok send those data back to Chinese government so that it would potentially threaten U.S. national security? We need proof, but so far none. Here's an article of French hacker Elliot Alderson (@fs0c131y) analyzing TikTok code: https://medium.com/@fs0c131y/tiktok-logs-logs-logs-e93e8162647a
So IMHO the two real reasons Trumps banned TikTok and WeChat are:
1. His supporters are mad that everything is made in China. It violates some basic economics principles but that's fine.
2. What happened to that Oklahoma rally, Trump really took it personal.
This ban put hundreds of thousands of Chinese people (including those who are already U.S. citizens or green card holders) in the U.S. to a difficult position. They don't have other ways to communicate with there friends/families in China other than WeChat. But I guess, those people (including myself), are the least important factors Trump worries about, if he even cares at all.
mdp2021 · 2023-11-30
> [Jean-Noël Barrot, French digital minister]: «My team and I have been using it since July 2022. In December, the entire government will be using [Olvid], the world's most secure instant messaging system» ... // Tchap, the government-developed secure messaging and collaboration app, launched in 2019, is also allowed
The first question is, how can the rest of the public be sure that those two new systems indicated are free from backdoors.
Olvid was briefly discussed by the community apparently only at https://news.ycombinator.com/item?id=29779230 two years ago.
Tchap was examined in 2019 at https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-fre…
jimlongton · 2023-02-13
I hope their security is better than in 2019 when the French Tchap service based on Matrix was immediately compromised by a trivial attack [1].
Matrix.org has also been breached in the past [2].
That's ignoring the fact their project was born out of a company that operates front offices for one of the world's most aggressive spy agencies...
[1] https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-fre…
[2] https://matrix.org/blog/2019/04/11/we-have-discovered-and-addressed-a-…
xvector · 2021-08-11
> Far more invasive tracking
False. It's actually not worse than any other social media platform. [1] It doesn't even try to exploit your browser and device, like Reddit does. [2]
[1]: https://medium.com/@fs0c131y/tiktok-logs-logs-logs-e93e8162647a
[2]: https://smitop.com/post/reddit-whiteops/
sudoaza · 2020-08-11
Haven't seen any report on TikTok spying, what I've seen is an in depth analysis that shows it justs reports the usual system specs and does it securely (as any app handling private data should) https://medium.com/@fs0c131y/tiktok-logs-logs-logs-e93e8162647a
CarelessExpert · 2020-08-08
You mean educate myself with a post from an anonymous random Redditor who never actually proved any of their claims?
https://www.reddit.com/r/tiktok_reversing/comments/i3d9qw/somebodys_go…
I feel like this is the tech equivalent of QAnon...
To be clear, I don't think Facebook is any better than Tiktok. But I've seen zero actual evidence it's any worse. Frankly, the whole thing stinks of sinophobia dressed up as privacy pearl clutching...
Edit: and if you want an actual analysis with real evidence and data:
https://medium.com/@fs0c131y/tiktok-logs-logs-logs-e93e8162647a
"As far as we can see, in its current state, TikTok doesn’t have a suspicious behavior and is not exfiltrating unusual data."
Zenst · 2020-02-24
Ah yes, I'd forgotten about that - https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-fre…
achamayou · 2020-02-24
Mistakes were made along the way: https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-fre…
gus_massa · 2019-06-09
The first linked tweeter thread is from July 2018, the second is from November 2018. I don't classify that as "too old". And your article is dated October 25, 1028, so it's approximately the same period of time.
Also, your article is extremely similar to https://medium.com/@fs0c131y/how-i-found-the-database-of-the-donald-da… (Oct 16, 2018)
ccnafr · 2019-04-23
I see ArsTechnica did everything under its power not to link to the researcher's report. You can't hide blog spam from me, ArsTechnica editors!!!
Source: https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-fre…
kawera · 2019-04-20
And a few hours later a french researcher[1] found some embarrassing flaws[2], including one from python's standard lib[3].
[1] https://twitter.com/fs0c131y
[2] https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-fre…
[3] https://twitter.com/fs0c131y/status/1119143946687434753/video/1
badRNG · 2020-09-01
Regardless of what you think about TikTok, the banning of an app in the interest of "national security" is largely unprecedented.
The jump from banning Huawei from building critical public infrastructure to banning an app that hasn't even conclusively been proven to behave in any uniquely dangerous ways seems to be an intense, unjustified escalation of this conflict. [1]
You may disagree with me on the strict security-related merits of banning TikTok, and I am willing to concede all of them, however this will, either way, establish a precedent of an app's coverage by 1st amendment free speech protections, and of what standards the government needs to do to ban an app, whether it be a Chinese social media app or an end-to-end encrypted messaging app. [2]
If the standard is simply to claim that it's "a national security threat" without requiring any further evidence (besides the fact that it's Chinese) then that might be cause for concern.
[1] https://medium.com/@fs0c131y/tiktok-logs-logs-logs-e93e8162647a
[2] https://www.eff.org/deeplinks/2020/08/tiktok-ban-seed-genuine-security…