TikTok is an absolute opsec nightmare. I put together this short effort post to make sure y'all are staying safe. TikTok is a very useful tool for bringing short snippets of political theory to absolutely massive quantities of people, but like any tool, it needs to be used safely. By default, if you share a TikTok, including with link share, you are giving your handle to everyone who has the link.
But @aaro, why do I care?
By default, if someone has your tiktok handle, they can see your mutuals, your following/followed, and any linked accounts you have. This exposes (including but not limited to):
- rough geographic location if you have IRL mutuals who have bad opsec (assume that this is the case if you have any IRL mutuals at all) - e.g. you are mutuals with 5 of your high school friends, 4 of them have their Facebook accounts linked, and 3 of them have their hometown, graduating school, or current location public on their profile, a curious party might be able to take a guess at your location from this information
- Your political views based on your following list
- Comments you have made if the person after your deets is persistent
From easy to do and very important to harder to do and not as important, here are steps to keep your profile and links you share safe:
- Profile > Upper right menu > Settings and Privacy > Privacy> Suggest your account to others > turn off People who open or send links to you. Really turn off all of these, this is the lowest of the low hanging fruit for privacy.
- When you share a link on Tiktok by copying link, paste it in your web browser and go to it first. The link will turn from
https://www.tiktok.com/t/{9 characters}/tohttps://www.tiktok.com/@{username}/video/{19 numbers}{question mark and a bunch of other shit}. Delete everything including and after the question mark and leave behind the 19 numbers. The original form is a link unique to you when you share it and it's possible (but not obvious) to trace this back to your account. Once you resolve the link and delete the extra baggage, the tiktok is now anonymized. - If you don't want tiktok seeing anyone's IP address even, then take this new anonymized link, paste it into http://proxitok.herokuapp.com and set the dropdown to "TikTok URL" then hit go. The resulting link will be a truly 100% anonymized TikTok link. Think of this as https://nitter.net but for TikTok.
TikToks posted here should at least go through #2. Thanks for reading and stay safe comrades :cyber-lenin:
It's a lot less of a factor if you're not tied to an account so any privacy you might gain is a lot more marginal and you're most likely good, but make sure you clean up links that your friends send to you before you pass them along to anyone else!