At least Aalto University is considering whether it can continue using Tiktok due to the recent revelations. For many public actors, Tiktok is an important tool for reaching the public.
Olli-Pekka Toivanen,
Linnea Virtanen
The information security gaps revealed on Tiktok also raise serious questions for Finnish authorities and media houses. Can they operate on a platform that is known to be able to harvest its users’ passwords?
It is possible for the Chinese-owned Tiktok to monitor, for example, the text entered on the keyboard in its own in-app browser. In theory, it would thus be possible for Tiktok to gain access to information such as credit card information or passwords.
Of the applications examined, only Tiktok did not allow the user to switch to the phone’s default browser. According to Krause, it’s about conscious programming.
Tiktok has confirmed Krause’s observations as correct. The company emphasizes that monitoring is done to facilitate user-friendliness and not to collect personal information.
Tiktok is mainly used by 18-24 year olds. In Finland, many authorities also use the service to reach young people.
We asked , Helsingin Sanom, the Helsinki Police, the Tax Administration and Aalto University how they justify operating on Tiktok in light of the new information security revelations.
The police and the Tax Administration follow the information security discussion
Of the authorities, for example, the Tax Administration’s Tiktok account has more than 12,000 followers. The content is humorous and shares up-to-date information about, for example, missing account numbers and the date of payment of bills.
Director of Security and Risk Management of the Tax Administration Samu Bergström says that he is aware of news related to Tiktok’s information security.
At the moment, Tiktok’s risks do not exceed the benefits of the application, says Bergström.
– If the use of Tiktok would ever endanger the activities of citizens, then we would have to consider stopping the use of the application.
User tracking is also typical for other applications. For example, Facebook and Instagram collect metadata about the user’s activity, but allow a more flexible option to change the browser to the phone’s default browser.
Krause, who conducted the data security report, emphasizes that there is no evidence that Tiktok collects sensitive information about its users. In any case, it is a security risk.
In the police, Tiktok accounts are used by both police departments and individual authorities. For example, the Helsinki police account presents police activities and videos of events affecting young people, such as school graduation weekends and Christmas parties.
Communications Manager of the Helsinki Police Leena Karhumäki social platforms are treated with a certain reservation. The Helsinki police have separate devices and their own smartphones for social media use.
Aalto University reevaluates the use of Tiktok
According to both Bergström and Karhumäki, Tiktok reaches not only young people, but also a wider target group. The police should be where the people are, Karhumäki justifies the introduction of Tiktok.
The police have only had positive experiences with the use of Tiktok.
– On the closing weekend of the schools, we sent a traditional bulletin reminding you to take care of your friend. When we made a video with the same content on Tiktok with the constables of the preventive action, it collected 300,000 views in three days, says Karhumäki.
Karhumäki emphasizes that the police actively monitors the information security discussion related to social media platforms. Social media plays an important role in the preventive activities of the police and it is used versatilely, but carefully.
Among universities, for example, Aalto University uses Tiktok in its communication. Aalto is currently evaluating Tiktok’s role in the light of the facts that have now been revealed, says Aalto’s social media coordinator Laura Vaherkoski.
In Aalto’s general account, links have been utilized very little, except for advertisements. However, as a general rule, when using social media, people’s own judgment is trusted, says Vaherkoski.
– We want to act responsibly, monitor new information and public discussion from the use of platforms and tools, and use these criteria to evaluate our own activities.
‘s ethics manager: Users’ information security must be taken into account
The news about Tiktok was received calmly in the editorial office, says the head of the editorial office Talk about Sarhimaa. The issue is not a data security problem, but privacy protection, he says.
– If you want to avoid Tiktok’s data collection, you should use your phone’s default browsers and not open any link directly in Tiktok. Then Tiktok cannot collect data. You can easily copy the address into your phone’s browser.
also has several Tiktok channels. Kioski, aimed at young people, was Finland’s first Tiktok channel that produced news content.
‘s ethics manager Timo Huovinen says that the Tiktok-related news has sparked discussion within as well. The discussions are part of a broader, regular reflection on the use of social media.
– If the main focus of (Tiktok’s) activity would be phishing for intelligence or sufficiently far-reaching commercial purposes, its use should be reconsidered. This also applies to other social media, says Huovinen.
‘s strategy states that publishes its content primarily on its own platforms, i.e. ‘s website and its own applications, Areena, television and radio. Third-party platforms such as Tiktok can be used judiciously to reach audiences that cannot otherwise reach.
Huovinen states that , as a public service, must be accessible to everyone. However, when it comes to social media, users’ information security must also be taken into account. The main publication channels, i.e. television, radio and the web, must be under ‘s control.
‘s information security manager by Kim Johansson according to ‘s own information security function, the purpose of ‘s own information security function is primarily to protect, among other things, ‘s personnel and information subject to personal and source protection in ‘s possession.
– As a social influencer, considers the services it uses also from the point of view of consumer safety, says Johansson.
– As far as Tiktok is concerned, it is especially worrying that things about the application and service in question have been revealed several times that the manufacturer of the service has not told or has told in a different way. This is not likely to inspire trust in the service in question. In addition, the question arises, is this all?
The decision regarding the publication and dialogue with the public is typically made in ‘s units, with which information security cooperates.
– We also help the team members to understand what kind of features the different services have and what kind of effects the features might have on, for example, information security or privacy, says Johansson.
You can discuss the matter on 27.8. until 11 p.m.