The article discusses the discovery of malware in Pinduoduo's app, which allows it to access users' locations, contacts, calendars, notifications, and photo albums without their consent. The team that developed the exploit was disbanded after the issue was raised by a cybersecurity firm called Dark Navy.
Experts say that Pinduoduo's apparent malware would be a violation of China's data privacy laws, which were enacted in 2021 to regulate the collection, processing, and transmission of personal information. However, Pinduoduo did not appear on any of the lists published by the Ministry of Industry and Information Technology or the Cyberspace Administration of China.
The article highlights concerns about the oversight failure by regulators, who are supposed to check for such issues but failed to do so in this case. A cybersecurity expert with 1.8 million followers wrote a viral post on Weibo, criticizing the lack of understanding among regulators and warning that it was "embarrassing" for them.
The article concludes by stating that CNN's Kristie Lu Stout and Sean Lyngaas contributed reporting.
Key points:
* Pinduoduo's app contains malware that allows it to access users' sensitive information without their consent.
* The team that developed the exploit was disbanded after being discovered by Dark Navy.
* China's data privacy laws were enacted in 2021 to regulate the collection, processing, and transmission of personal information.
* Pinduoduo did not appear on any of the lists published by the Ministry of Industry and Information Technology or the Cyberspace Administration of China.
* Regulators' lack of understanding about technology is a concern, as they failed to detect the malware in this case.
* A cybersecurity expert with 1.8 million followers criticized the lack of action taken by regulators.
Experts say that Pinduoduo's apparent malware would be a violation of China's data privacy laws, which were enacted in 2021 to regulate the collection, processing, and transmission of personal information. However, Pinduoduo did not appear on any of the lists published by the Ministry of Industry and Information Technology or the Cyberspace Administration of China.
The article highlights concerns about the oversight failure by regulators, who are supposed to check for such issues but failed to do so in this case. A cybersecurity expert with 1.8 million followers wrote a viral post on Weibo, criticizing the lack of understanding among regulators and warning that it was "embarrassing" for them.
The article concludes by stating that CNN's Kristie Lu Stout and Sean Lyngaas contributed reporting.
Key points:
* Pinduoduo's app contains malware that allows it to access users' sensitive information without their consent.
* The team that developed the exploit was disbanded after being discovered by Dark Navy.
* China's data privacy laws were enacted in 2021 to regulate the collection, processing, and transmission of personal information.
* Pinduoduo did not appear on any of the lists published by the Ministry of Industry and Information Technology or the Cyberspace Administration of China.
* Regulators' lack of understanding about technology is a concern, as they failed to detect the malware in this case.
* A cybersecurity expert with 1.8 million followers criticized the lack of action taken by regulators.