Shopping app Temu is “dangerous malware,” spying on your texts, lawsuit claims

Nemeski@lemm.ee to Technology@lemmy.world – 851 points –
Shopping app Temu is “dangerous malware,” spying on your texts, lawsuit claims
arstechnica.com
236

You are viewing a single comment

Here's the actual relevant part

These are security risks to be sure, and while these permissions are (mostly) on the surface, possibly defensible, together they do clearly represent an app trying to gather all of the data that it can.

However, a lot of info from this report is overblown. For example code compilation is sketchy to be sure, but without a privilege escalation attack, it can't do anything the app couldn't do with an update.

Also, there's some weird language in the report, like counting the green security issues in other apps (like tiktok) as if they were also a problem, despite the image showing that green here means it doesn't present that particular risk.

All of this to say, if you have temu, probably uninstall it. It's clearly collecting all the data it can get.

But it's unlikely to be the immediate threat that will have China taking over your phone like this report implies.

This infographic is really helpful. Stuff like this makes me relieved I use the majority of services in a browser, rather than native apps

I'm blown away by how many people use apps when they don't have to. There's a reason companies are always trying to get you to download their app, and it's so they can put their software on your phone and harvest more of your data.

Exactly why I use browser and not apps, too. and if they try to strongarm me with better prices or degraded services, I just stop using them all together.

Yup. I used to watch TikTok’s sent to me. Now I can’t. They want me to use their app. LOL. Nah.

It's why I stopped using Reddit on mobile lol. No, I don't want to download your official app, and no you making it so I need it to access NSFW stuff will convince me to.

Same with X/Twitter. I hate when people put information in those now because you can't read more than one at a time in some reply to self thread on there without downloading the app. Especially when it's important news or on the ground reporting. Screw that. All those reporters need to use mastadon.