Embed Notice

TIL that if you try to sign up for Tiktok by signing in with your existing Google account, for example, doing so requires you to allow sharing of your Twitter/X profile info (assuming you still have one) and account settings. You also give permission to the app to then follow and unfollow accounts for you, create and delete posts for you and engage with posts created by others.

I'm sure this is not news to a lot of people, but since I spend negligible amounts on time on either, it was to me. I'm still wondering how an attempt to create a Tiktok account with Google signin leads to an immediate prompt to share your Xitter profile. At this point in the process, I don't even have a TikTok account yet and they're already asking for permission to another account I may have. Absolutely nothing about this feels good.

This kind of shit is probably why I pinned this post so long ago:

https://infosec.exchange/@briankrebs/109880177018417627