The article discusses the discovery of malware in Pinduoduo's shopping app, which allows access to users' sensitive information without consent. The team that developed the exploits was disbanded by Pinduoduo after it was discovered.
Here are some key points from the article:
1. **Malware discovery**: In late February, a Chinese cybersecurity firm called Dark Navy reported finding malware in Pinduoduo's shopping app.
2. **Exploits uncovered**: The malware allowed access to users' sensitive information, including locations, contacts, calendars, notifications, and photo albums.
3. **Team disbandment**: After the discovery, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits.
4. **Update removals exploits**: Two days after the update, Pinduoduo removed the malware from its app.
5. **Oversight failure**: The Chinese Ministry of Industry and Information Technology failed to detect the malware, which is embarrassing for regulators.
6. **Regulatory concerns**: The incident raises concerns about the effectiveness of China's regulatory framework in protecting user privacy.
7. **Censorship**: A cybersecurity expert with 1.8 million followers on Weibo wrote a post criticizing regulators' inability to understand coding and programming, which was censored by the platform.
Overall, the article highlights the risks posed by poorly designed apps and the importance of robust regulatory oversight in protecting user privacy.
Here are some key points from the article:
1. **Malware discovery**: In late February, a Chinese cybersecurity firm called Dark Navy reported finding malware in Pinduoduo's shopping app.
2. **Exploits uncovered**: The malware allowed access to users' sensitive information, including locations, contacts, calendars, notifications, and photo albums.
3. **Team disbandment**: After the discovery, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits.
4. **Update removals exploits**: Two days after the update, Pinduoduo removed the malware from its app.
5. **Oversight failure**: The Chinese Ministry of Industry and Information Technology failed to detect the malware, which is embarrassing for regulators.
6. **Regulatory concerns**: The incident raises concerns about the effectiveness of China's regulatory framework in protecting user privacy.
7. **Censorship**: A cybersecurity expert with 1.8 million followers on Weibo wrote a post criticizing regulators' inability to understand coding and programming, which was censored by the platform.
Overall, the article highlights the risks posed by poorly designed apps and the importance of robust regulatory oversight in protecting user privacy.
this malware incident is like a wake-up call for us all - we gotta be super cautious when using our favorite shopping apps 
, especially if they're getting updates fast 
. it's crazy how one team could create such a malicious code that even the regulators missed 
. it makes me think about the importance of diversity in coding teams and having regular security audits 
. also, what's up with all these censorship issues on weibo? shouldn't our opinions be freely shared like 
open-source software?
. & let's be real, cyber sec is like, super hard lol u gotta have experts watchin over these things 24/7 or else they're gonna get exploited 
. & btw, what r ppl even expect from china's reg framework? they're tryna keep up with the game, right? 
i mean i know we need a strong economy but at what cost? our personal info is literally being sold like cheap goods on the open market 
it's not just pinduoduo either, think about all those other apps out there collecting your data without even asking 
and to make matters worse, the regulators can't even be bothered to do their job properly 
it's like they're asleep at the wheel while our digital lives are being hacked to bits 
we need more transparency and accountability from these big tech companies, pronto 
It's not exactly reassuring that the company itself didn't even notice it was a problem until some third-party firm pointed it out. 
. It's not like Pinduoduo was doing anything wrong, it's just a case of bad design and oversight.
. I get that regulations can be tricky, but this is basic stuff - protecting user data! 
. But seriously, this should be a wake-up call for companies and regulators alike to prioritize user safety and data protection 
.
just read about this shady malware on Pinduoduo's shopping app 
, but apparently, some people need to brush up on it 
. And censuring the cybersecurity expert who spoke out? That's just not cool 
. We gotta keep pushing for better regulations and more transparency so this kind of thing doesn't happen again 
"]
"]
"]
and yeah, the fact that the chinese ministry of industry and info tech didn't detect this is pretty embarrassing for them 
but i guess that's not how it works out sometimes 
.
.
it's super scary thinking about how many ppl were affected by this 
shouldn't they have been notified sooner? did they even know who developed this stuff in the first place?