21 comments

  • xeckr 1 hour ago
    Brilliant. They're repackaging the argument governments have long made about E2EE being dangerous to children.
    • debazel 1 hour ago
      Children are just too effect of a tool when building a surveillance state. We should have banned children from owning open computers a long time ago just like we do with Alcohol, Driving licenses, etc.

      Instead children would own special devices that are locked down and tagged with a "underage" flag when interacting with online services, while adults could continue as normal. We already heavily restrict the freedom of children so there is plenty of precedent for this. Optionally we could provide service points to unlock devices when they turn 18 to avoid E-waste as well.

      This way it's the point of sale where you provide your ID, instead of attaching it to the hardware itself and sending it out to every single SaaS on the planet to do what they wish.

      • tayo42 43 minutes ago
        I can't tell if this is sarcasm or not
        • nandomrumber 0 minutes ago
          I’ll have a packet of cigarettes, a fifth of vodka, and an unrestricted personal electro device.

          ID please.

          Seems entirely reasonable.

          Possibility entirely ineffective, but then again I don’t often see children walking around with bottle of booze.

        • travisgriggs 20 minutes ago
          Hyperbole of some sort. I think it works on both the positive and negative side of the axis too.
  • computerex 1 hour ago
    TikTok is a front for government surveillance, so it's not really surprising that this is their position.
  • ranyume 1 hour ago
    This might be off-topic but on-topic about child safety... but I'm surprised people are being myopic about age verification. Age verification should be banned, but people ignore that nowadays most widely used online services already ask for your age and act accordingly: twitter, youtube, google in general, any online marketplace. They already got so much data on their users and optimize their algorithms for those groups in an opaque way.

    So yeah, age verification should be taken down, as well as the datamining these companies do and the opaque tunning of their algorithms. It baffles me: people are concerned about their children's DMs but are not concerned about what companies serves them and what they do with their data.

    • LoganDark 1 hour ago
      Monitoring children's DMs is the responsibility of the parents, not megacorps. If a parent wants to install a keylogger or screen recorder on their child's PC, that's their decision. But Google should not be able to. Neither should... literally anyone else except maybe an employer on a work-provided device.
      • ranyume 1 hour ago
        > Monitoring children's DMs is the responsibility of the parents, not megacorps

        Absolutely. But what responsibilities do megacorps have? Right now, everyone seems to avoid this question, and make do with megacorps not being responsible. This means: "we'll allow megacorps to be as they are and not take any responsibilities for the effects they cause to society". Instead of them taking responsibilities, we're collecting everyone's data and calling it a day by banning children from social networks... and this is because there are many interests involved (not related to child development and safety).

        • LoganDark 7 minutes ago
          > But what responsibilities do megacorps have?

          They should have a responsibility of transparency, accountability and empathy towards users. They should work for the user and in the interests of the user. But multiple constraints make this impossible in practice.

        • acuozzo 59 minutes ago
          > But what responsibilities do megacorps have? Right now, everyone seems to avoid this question

          Clear, simple, direct: Whatever was required of The Bell Telephone Company and nothing more.

          • ranyume 55 minutes ago
            I'd say that at minimum social networks need to be required to show how their algorithm works and allow users control over their data. They must be able to know why a content was served to them. Nowadays social networks are so pervasive in society, affecting it and molding it to unknown interests, that this is the bare minimum for a free society.

            Ideally, users should be able to modify the algorithm, so they can get just what they want, while simultaneously maximizing free speech. If something isn't illegal, it shouldn't be hidden or removed.

            • acuozzo 42 minutes ago
              > social networks need to be required to show how their algorithm works

              Hypothetically speaking: What if it's a neural network in which each user has his/her own unique weights which are undergoing frequent retraining?

              Would it not be an undue burden to necessitate the release of the weights every time they change?

              Also, what value would the weights have? We haven't yet hit the point of having neural networks with interpretability.

              Wouldn't enforcing algorithmic interpretability additionally be an undue burden?

              > They must be able to know why a content was served to them.

              What if the authors of the code are unable to tell you why?

          • da_chicken 35 minutes ago
            So there should be a human operator manually gatekeeping every individual request to connect with another endpoint?

            It's a good thing those human operators couldn't listen in to whichever conversation they wanted.

        • j16sdiz 29 minutes ago
          > But what responsibilities do megacorps have?

          fake and scam AD.

          they literally profit from those ADs. When the AD distributes malware or make scam, they don't take any responsibility

      • duped 1 hour ago
        Parents shouldn't give their child access to a device that allows DMs.

        That said, these platforms are making it impossible for parents to monitor anything. They're literally designed to profit off addiction in children.

        • greygoo222 1 hour ago
          Why? Plenty of children benefit from talking to other people. Some children need careful monitoring, and some children shouldn't be allowed to use DMs, but it's not universal and should be up to the parents.
  • ronsor 2 hours ago
    Why would you use TikTok for private communications anyway? It's mostly a public short video sharing platform.
    • halapro 1 hour ago
      It's the kids' social network, you're just old.
    • g947o 2 hours ago
      Says someone who has never sent a message to a friend over DM on TikTok.
    • asveikau 1 hour ago
      The way it starts is you pass videos back and forth with a friend. Then you find yourself chatting in the same app.

      I'm mindful that it's less secure than other apps, but for a lot of chats it doesn't matter.

    • adventured 2 hours ago
      You say that like the typical 18 year old has any idea what they're doing when it comes to proper encryption and communication safety. That is never going to be the case.

      It's a communication channel attached to the most popular social network for young people. Obviously they're going to use it a lot. They use it for the extreme convenience.

      • Barbing 36 minutes ago
        >never going to be the case.

        And in a perfect world essentially shouldn’t have to be, at least inside expensive walled garden app stores.

      • zadikian 31 minutes ago
        They might understand e2ee but not care.
    • m00dy 57 minutes ago
      it's more than that.
  • matricaria 8 minutes ago
    Since when is E2EE controversial? Not using E2EE should be controversial.
  • sheept 2 hours ago
    I feel like this makes sense for a platform that targets teens. Plus, I wouldn't trust TikTok to implement E2E encryption properly—who knows what they've snuck into their client.
    • ranyume 1 hour ago
      What kind of application is not targeted at both teens and adults?

      Youtube, twitter, bluesky, whatsapp? Every app with a social aspect will be used by teens. And no, tiktok is not "only for teens" or "specially targeted at teens", nowadays everyone uses it and creates content on it.

      • RajT88 1 hour ago
        Came here to post this.

        If you run (say) a restaurant, you get big spikes in business from TikTok videos in ways you don't get from Facebook or Instagram or others.

        TikTok is the platform everyone is one right now.

    • somenameforme 2 hours ago
      I think it's very safe to assume that no major US based platform has 'real' E2E encryption. They're almost certainly all a part of PRISM by now, and it'd contradict their obligations to enable government surveillance. So the only thing that's different is not lying about it. Though I expect the other platforms are, like when denying they were part of PRISM, telling half truths and just being intentionally misleading. 'We provide complete E2E encryption [using deterministically generated keys which can be recreated on demand].'
      • paulryanrogers 2 hours ago
        Signal is open source
        • Barbing 35 minutes ago
          Snowden endorsed last I heard? He doesn’t email of course.
  • blackqueeriroh 1 hour ago
    There is no way to do E2EE on a traditional social media platform with user-generated content and comply with existing US law.

    You can’t moderate an E2EE platform.

    • rockskon 27 minutes ago
      Aside from the fact that you can get Metadata and that some communication frequently happens outside of E2EE - what US law do you believe mandates moderation? I'm curious.
    • tbrockman 53 minutes ago
      What law do you believe supports your perspective?
  • matesz 30 minutes ago
    Fun fact - there is a big correlation between World Wars and compulsory education. Of course governments and big corporations "care" about children. Of course!
  • tw04 1 hour ago
    Reminder, Larry “citizens shouldn’t get any privacy” Ellison now owns tik tok. If you’re still using it or have friends and family using it you should stop immediately. It WILL eventually be used against you if this regime gets its way.

    https://digitaldemocracynow.org/2025/03/22/the-troubling-imp...

    • dylan604 12 minutes ago
      As if. If people haven't stopped using TikTok with all of the other reasons for stopping, then because Ellison is damn sure not going to move the needle.
  • maest 2 hours ago
    Do you feel safer knowing DMs are not encrypted?
    • sethops1 2 hours ago
      Nobody should feel safe using the TikTok client, period.
      • mullingitover 2 hours ago
        Not just the TikTok client, anything made by Oracle is risky.
      • tartoran 2 hours ago
        Neither Instagram/Facebook's Messenger/WhatsApp.
        • tamimio 2 hours ago
          And signal
          • derwiki 2 hours ago
            What do you use for messaging?
            • modernpacifist 1 hour ago
              Obviously carrier pigeons carrying messages encrypted with post-quantum ciphers where keys have been sent ahead of time using USPS because no one would be so rude as to read someone elses mail.
            • tamimio 1 hour ago
              I have been using simpleX for some time now.
    • stephbook 37 minutes ago
      Do you take "yes" for an answer?

      It really depends on whether you think your government is more dangerous than, say, suicide trends, grooming, scamming.

      I know the answer is pretty easy for US citizens to answer right now.

  • bas 1 hour ago
    Fascinating. What a time to be alive.
  • dakolli 25 minutes ago
    You guys haven't deleted TikTok yet. I don't use Zionist products.
    • mobtrain 10 minutes ago
      Thanks for letting us know, 53 days old HN account!
  • Tyrubias 1 hour ago
    TikTok’s stance against end-to-end encryption is unsurprising but still concerning. TikTok is a source of information on many topics, such as the genocide in Gaza, which traditional media underreport and many governments try to suppress. The network effect of big social media platforms means many people will likely talk about these topics in TikTok DMs. No matter what legal controls TikTok claims to enforce, there is no substitute for technological barriers for preventing invasions of privacy and government overreach. This is yet another example where corporations and governments sacrifice people’s autonomy and privacy in the name of security.
    • spaqin 1 hour ago
      It's a pretty terrifying world we live in now, where an unencrypted addictive short-form video platform is considered a source of information more than news agencies or even community-managed forums.
      • consp 58 minutes ago
        For older generations Facebook has the same problem. "On Facebook it said [propaganda item bla bla]" is something I hear with those generations.
    • bbshfishe 26 minutes ago
      [dead]
  • rdiddly 1 hour ago
    "The situation is made more complex because TikTok has long faced accusations that ties to the Chinese state may put users' data at risk."

    And yet, it's even more complex than that, since it's now owned by cronies of the current US President. I've never had a TikTok account, but conceptually I was mostly pretty okay with being spied-upon by China. I'm never going to China.

    • BLKNSLVR 46 minutes ago
      > I'm never going to China.

      China will come to us.

      Or should that be:

      China will come to the US.

    • andrewinardeer 1 hour ago
      > "I'm never going to China."

      Voluntarily.

      • fragmede 1 minute ago
        Yes. China gives a shit that user rdiddly, at 36 minutes before 00:55 UTC on March 4, 2026, said that China is spyihg to the point that they are going to be abducted for it.
  • Madmallard 26 minutes ago
    clown emoji
  • burnt-resistor 1 hour ago
    It's the Max app for Americans, now with 900% more US and IL government spying.
  • croes 48 minutes ago
    > Grooming and harassment risks are very real in DMs [direct messages] so TikTok now can credibly argue that it's prioritising 'proactive safety' over 'privacy absolutism' which is a pretty powerful soundbite

    Means they read every message

  • Bud 2 hours ago
    BBC calling encryption "controversial privacy tech" is deeply disappointing and dangerous.
    • ggm 2 hours ago
      It is controversial.. amongst people who have concerns about private communications and society, from a regulatory and governance perspective.

      It's uncontroversial amongst people who value their privacy.

      The tension between the two camps (there are obviously nuances and this is a false dichotomy) is at a current peak. It's an ongoing controversy. It's a matter of public debate.

      You might have liked it better if the angle had been "...which the government, controversially, wants to clamp down on" or something.

    • 1shooner 1 hour ago
      I wondered how it could be considered 'controversial', but they do quote at least a couple groups speaking against it. The NSPCC for instance, who incidentally also warned parents about a Harry Potter video game because their children might want to learn more about the game:

      >“Parents should also be aware that players may want to find out more about the game using other platforms such as YouTube, Twitch, Reddit and Discord, where other game fans can discuss strategies and experiences.

    • stinkbeetle 1 hour ago
      Calling something controversial is a favorite propaganda technique employed by "news" outlets. It's another form of selective reporting and framing. It carries negative connotations, and has really no objective standard by which it can be wrong since you'll always find somebody against any issue.

      After you notice it, you'll notice it everywhere.

    • unethical_ban 1 hour ago
      The UK government seems a lot more willing to embrace the panopticon in the name of protecting people from terrorists, child sex traffickers, human rights activists, Catholics, jaywalkers, you name it.
  • pothamk 1 hour ago
    The core tension here isn’t really about encryption itself, it’s about moderation models.

    Most large platforms rely heavily on server-side visibility for abuse detection, spam filtering, recommendation systems, and safety tooling. End-to-end encryption removes that visibility by design. Once a platform is built around centralized analysis of user content, adding strong E2EE later isn’t just a feature toggle — it conflicts with large parts of the existing architecture.