's headjoined by tiktok of engineering, jeff schwartz.report was alarming, page after page getting more nervous. what are some of the major security flaws you found? two allowed a bad actor, a malicious user to modify urls for login that would result in code being run on the victims' devices. based on that code being run, account takeover activity is capable to be leveraged against onceictim's device, and that account is taken over, there is modification of videos, deleting videos, marking videos that are private as public, and a subsequent vulnerability that allows for api access into the personal data of the account owner, that was being maintained by tiktok. >> what are the weaknesses in infrastructure that allow this to happen? aboutou informed tiktok this, they deployed a patch for it. >> we notified them through responsible disclosure, and they were cooperative with these issues. but the research is a much larger concern, and that is the fact many applications are deployed on consumer and enterprise devices that are susceptible. the