Comment by wantedtoask
1 year ago
My brain automatically thought this is "TikTok" -> Why would they release research on security if they are being targeted for security concerns
1 year ago
My brain automatically thought this is "TikTok" -> Why would they release research on security if they are being targeted for security concerns
> Why would they release research on security if they are being targeted for security concerns
Hmm. That doesn’t really follow IMO.
Every big corporation needs to have information security people. And most of them probably do some form of research as well. That’s the only way to stay on top of information security.
Whether they publish anything or not is up to them. But it’d be super silly to base the decision for that on the fact that USA government is banning TikTok.
By that line of argument, couldn’t you just as well say that they shouldn’t reveal that they hire infosec people either? Yet for example at https://careers.tiktok.com/m/position?category=6704215862603... they have several job openings relating to infosec such as this one: https://careers.tiktok.com/m/position/7379470900063095078/de...
> The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile.
Heck here they even say just that: “proactively identifying and reducing risks while enabling innovative product development”. A natural part of that would be doing for example the kind of security researcher that the article of the OP is about.