- On Friday, the United States Commerce Department issued an order that would ban U.S. downloads of TikTok and WeChat starting Sunday night.
- The order for TikTok was delayed for one week on Saturday after President Donald Trump gave his preliminary approval on a deal between TikTok and the software company Oracle.
- A federal judge also issued a temporary injunction Sunday against the WeChat ban, which would have largely destroyed the app’s functionality.
- Oracle and Walmart have since released more details of the deal, including that TikTok Global will likely pay $5 billion in U.S. taxes. This does not seem to be the same as a commission from the deal, even though Trump suggested such.
- On Monday, Chinese state media called the deal “unfair” on ByteDance, TikTok’s parent company. However, it also described it as “reasonable,” suggesting the Chinese government may approve the deal.
U.S. and China Signal Support for Deal
What began as a tumultuous weekend for TikTok ended with both the U.S. and Chinese governments potentially signaling approval of its deal with Oracle.
Last week, TikTok’s parent company, ByteDance, struck a deal with Oracle to avoid a U.S. ban. On Monday, Chinese state media called the deal “more reasonable to ByteDance,” and said it’s less costly than a shutdown.
“The plan shows that ByteDance’s moves to defend its legitimate rights have, to some extent, worked,” it added.
While not officially confirmed, this seems to suggest that the Chinese government may approve the deal.
It also came off the heels of Saturday, when President Donald Trump, after having suggested unhappiness with the deal last week, said he has given his approval “in concept.” He will still need to officially sign off on it before the deal is set into motion.
Because of that, the U.S. Commerce Department staved off a download ban that was set for Sunday, now pushing it back to this coming Sunday, Sept. 27.
Some Republicans, such as Senator Marco Rubio (R-Fl.), have still expressed concern because ByteDance won’t be handing over its secretive algorithm as part of the deal.
What’s in the Deal?
On Saturday, Oracle released more details of its deal with TikTok. Under it, Oracle and Walmart would take a combined 20% stake in TikTok Global.
Still, there’s been much back and forth over how much control ByteDance, will have under the agreement. For his part, Trump has claimed that TikTok Global will “be a brand new company… It will have nothing to do with China.”
However, ByteDance has maintained that it will retain 80% of the stake. The discrepancy here seems to be because 40% of ByteDance is owned by U.S. venture capital firms. Therefore, Trump could technically claim that TikTok Global will be majority-owned by U.S. money.
Trump doubled down Monday and said that he would not approve the deal if ByteDance retained ownership. He added that the Chinese-owned company will “have nothing to do with it, and if they do, we just won’t make the deal.”
Later, Oracle announced that ByteDance will not have any stake in TikTok Global, though this statement heavily conflicts with what is being reported in China.
“Upon creation of TikTok Global, Oracle/Walmart will make their investment and the TikTok Global shares will be distributed to their owners, Americans will be the majority and ByteDance will have no ownership in TikTok Global,” the company said.
According to Walmart and Oracle, if this deal goes through, TikTok Global will pay $5 billion in new tax dollars to the U.S. Treasury over the next few years. As both companies noted, this is just a projection of future corporate taxes, and that estimate could change.
The water around that $5 billion figure was later muddied as Trump claimed that TikTok Global would be donating “$5 billion into a fund for education so we can educate people as to [the] real history of our country — the real history, not the fake history.”
To be clear, Trump is referring to his plans to establish a “patriotic education” commission.
On Sunday, ByteDance said in a statement that this was the first it had heard about a $5 billion education fund.
In fact, TikTok Global never promised to start an education fund. Instead, it promised to create an “educational initiative to develop and deliver an AI-driven online video curriculum to teach children from inner cities to the suburbs a variety of courses from basic reading and math to science, history and computer engineering.”
That initiative doesn’t seem to have anything to do with that $5 billion tax figure. Since he began pursuing a ban, Trump has vowed that the U.S. will receive some form of commission from a deal with TikTok. As far as it is known, this $5 billion figure is also not that commission.
As previously reported, this deal will allow Oracle to host TikTok’s user data on its cloud service and review TikTok’s code for security. According to Treasury Secretary Steven Mnuchin, it would also shift TikTok’s global headquarters from China to the U.S.
On top of that, TikTok’s board members would reportedly have to be approved by the U.S. government, with one being an expert in data security. That person would also hold a top-secret security clearance.
Commerce Department Announces Download Ban
Friday seemed like the beginning of the end for TikTok. That morning, the Commerce Department issued an order that would ban U.S. downloads of not only TikTok but also WeChat starting Sunday night.
Both bans were a result of concerns the Trump administration has that ByteDance and WeChat’s parent company, Tencent, are either already giving or could give U.S. user data to the Chinese government.
The Trump administration has repeatedly said that both apps pose a national security threat.
TikTok and ByteDance have consistently denied these claims, saying that U.S. user data is stored domestically with a backup in Singapore. WeChat, for its part, has also made similar statements.
The download ban was announced in response to two Aug. 6 executive orders from Trump. Those orders ban any U.S.-based transactions with TikTok and WeChat starting on Sept. 20, which is why the Commerce Department set the deadline for this past Sunday.
While this ban would have been much more restrictive for WeChat because a large part of its functionality relies heavily on in-app transactions, for TikTok at least, it would only affect new downloads and updates to the app.
“So if that were to continue over a long period of time, there might be a gradual degradation of services, but the basic TikTok will stay intact until Nov. 12,” Commerce Secretary Wilbur Ross told Fox Business on Friday.
“If there’s not a deal by Nov. 12, under the provisions of the old order, then TikTok would also be, for all practical purposes, shut down.”
What Happens on Nov. 12?
Ross is referring to another executive order, this one signed on Aug. 14. Notably, it gives ByteDance 90 days to divest from its American assets and any data that TikTok had gathered in the U.S. As Ross pointed out, that requirement could be satisfied if a deal is reached before the deadline.
If that doesn’t happen, the TikTok app could begin to see lags, lack of functionality, and sporadic outages.
However, it’s not just the U.S. One of the big questions that loomed after Oracle and ByteDance confirmed their deal last week was whether or not China would also need to approve it. ByteDance later confirmed that it will need the confirmation of the Chinese government, despite the deal not involving a technology transfer.
Downloads Soar and TikTok Sues
On Friday, downloads for both apps soared. TikTok was downloaded nearly a quarter of a million times that day, up 12% from the previous day. WeChat was downloaded 10,000 times, up 150%.
The same Friday, TikTok as a company criticized the Commerce Department order, saying it had already committed to “unprecedented levels of additional transparency.”
TikTok added that the order “threatens to deprive the American people and small businesses across the US of a significant platform for both a voice and livelihoods.”
Later Friday, TikTok sued the Trump Administration to stop the download ban.
On Sunday, a federal judge also halted the download ban for WeChat with a preliminary injunction. The injunction additionally blocks the Commerce Department’s attempt to bar transactions on the app.
The Commerce Department responded by saying that it’s preparing for a long legal battle.
TikTokers: “Scared, angry, and confused”
“I’ve mostly just been feeling scared, angry, and confused,” TikToker Isabella Avila, known online as onlyjayus, told Rogue Rocket on Monday. “Those are just the main things.”
Avila has amassed a following of 8.7 million followers on TikTok in a relatively short amount of time. She’s also gained about half a million followers on YouTube and Instagram each.
A couple of months ago, Avila said she thought a potential ban was all just talk; however, as the situation progressed, she said she became more worried.
While she said that she personally thought her career could survive a TikTok ban (thanks in part to a Netflix podcast deal), she added, “The people in-between a 100,000 to a million [followers], they have a platform right now, and if TikTok’s were to be gone, their platform’s pretty much gone if they haven’t built an audience on anything else.
“This is where we go to express ourselves,” she said. “This is where we go to make videos. I don’t know, TikTok gave everybody a chance to kind of get famous and have a following. That’s what people liked about it. YouTube, it’s really hard to get followers and subscribers. TikTok was a lot easier.”
Avila also expressed that a ban wouldn’t just be detrimental to creators.
“I feel like my generation needed an app,” Avila said. “There was Instagram and Twitter, but it was kind of like for the millennials. Gen Z didn’t really have an app, and TikTok kind of fit that spot, so if TikTok’s gone, I don’t know, I feel like Gen Z isn’t really going to have a place.”
Avila now says she is largely hopeful that TikTok will not be banned in the U.S.
See what others are saying: (The Washington Post) (NBC News) (Axios)
Hackers Hit Twitch Again, This Time Replacing Backgrounds With Image of Jeff Bezos
The hack appears to be a form of trolling, though it’s possible that the infiltrators were able to uncover a security flaw while reviewing Twitch’s newly-leaked source code.
Hackers targeted Twitch for a second time this week, but rather than leaking sensitive information, the infiltrators chose to deface the platform on Friday by swapping multiple background images with a photo of former Amazon CEO Jeff Bezos.
According to those who saw the replaced images firsthand, the hack appears to have mostly — and possibly only — affected game directory headers. Though the incident appears to be nothing more than a surface-level prank, as Amazon owns Twitch, it could potentially signal greater security flaws.
For example, it’s possible the hackers could have used leaked internal security data from earlier this week to discover a network vulnerability and sneak into the platform.
The latest jab at the platforms came after Twitch assured its users it has seen “no indication” that their login credentials were stolen during the first hack. Still, concerns have remained regarding the potential for others to now spot cracks in Twitch’s security systems.
It’s also possible the Bezos hack resulted from what’s known as “cache poisoning,” which, in this case, would refer to a more limited form of hacking that allowed the infiltrators to manipulate similar images all at once. If true, the hackers likely would not have been able to access Twitch’s back end.
The photo changes only lasted several hours before being returned to their previous conditions.
First Twitch Hack
Despite suspicions and concerns, it’s unclear whether the Bezos hack is related to the major leak of Twitch’s internal data that was posted to 4chan on Wednesday.
That leak exposed Twitch’s full source code — including its security tools — as well as data on how much Twitch has individually paid every single streamer on the platform since August 2019.
It also revealed Amazon’s at least partially developed plans for a cloud-based gaming library, codenamed Vapor, which would directly compete with the massively popular library known as Steam.
Even though Twitch has said its login credentials appear to be secure, it announced Thursday that it has reset all stream keys “out of an abundance of caution.” Users are still being urged to change their passwords and update or implement two-factor authentication if they haven’t already.
Twitch Blames Server Configuration Error for Hack, Says There’s No Indication That Login Info Leaked
The platform also said full credit card numbers were not reaped by hackers, as that data is stored externally.
Login and Credit Card Info Secure
Twitch released a security update late Wednesday claiming it had seen “no indication” that users’ login credentials were stolen by hackers who leaked the entire platform’s source code earlier in the day.
“Full credit card numbers are not stored by Twitch, so full credit card numbers were not exposed,” the company added in its announcement.
The leaked data, uploaded to 4chan, includes code related to the platform’s security tools, as well as exact totals of how much it has individually paid every single streamer on the platform since August 2019.
Early Thursday, Twitch also announced that it has now reset all stream keys “out of an abundance of caution.” Streamers looking for their new keys can visit a dashboard set up by the platform, though users may need to manually update their software with the new key before being able to stream again depending on what kind of software they use.
As far as what led to the hackers being able to steal the data, Twitch blamed an error in a “server configuration change that was subsequently accessed by a malicious third party,” confirming that the leak was not the work of a current employee who used internal tools.
Will Users Go to Other Streaming Platforms?
While no major creators have said they are leaving Twitch for a different streaming platform because of the hack, many small users have either announced their intention to leave Twitch or have said they are considering such a move.
It’s unclear if the leak, coupled with other ongoing Twitch controversies, will ultimately lead to a significant user exodus, but there’s little doubt that other platforms are ready and willing to leverage this hack in the hopes of attracting new users.
At least one big-name streamer has already done as much, even if largely only presenting the idea as a playful jab rather than with serious intention.
“Pretty crazy day today,” YouTube’s Valkyrae said on a stream Wednesday while referencing a tweet she wrote earlier the day.
“YouTube is looking to sign more streamers,” that tweet reads.
“I mean, they are! … No shade to Twitch… Ah! Well…” Valkyrae said on stream before interrupting herself to note that she was not being paid by YouTube to make her comments.
The Entirety of Twitch Has Been Leaked Online, Including How Much Top Creators Earn
The data dump, which could be useful for some of Twitch’s biggest competitors, could signify one of the most encompassing platform leaks ever.
Massive Collection of Data Leaked
Twitch’s full source code was uploaded to 4chan Wednesday morning after it was obtained by hackers.
Among the 125 GB of stolen data is information revealing that Amazon, which owns Twitch, has at least partially developed plans for a cloud-based gaming library. That library, codenamed Vapor, would directly compete with the massively popular library known as Steam.
With Amazon being the all-encompassing giant that it is, it’s not too surprising that it would try to develop a Steam rival, but it’s eyecatching news nonetheless considering how much the release of Vapor could shake up the market.
The leaked data also showcased exactly how much Twitch has paid its creators, including the platform’s top accounts, such as the group CriticalRole, as well as steamers xQcOW, Tfue, Ludwig, Moistcr1tikal, Shroud, HasanAbi, Sykkuno, Pokimane, Ninja, and Amouranth.
These figures only represent payouts directly from Twitch. Each creator mentioned has made additional money through donations, sponsorships, and other off-platform ventures. Sill, the information could be massively useful for competitors like YouTube Gaming, which is shelling out big bucks to ink deals with creators.
Data related to Twitch’s internal security tools, as well as code related to software development kits and its use of Amazon Web Services, was also released with the hack. In fact, so much data was made public that it could constitute one of the most encompassing platform dumps ever.
Streamer CDawgVA, who has just under 500,000 subscribers on Twitch, tweeted about the severity of the data breach on Wednesday.
“I feel like calling what Twitch just experienced as “leak” is similar to me shitting myself in public and trying to call it a minor inconvenience,” he wrote. “It really doesn’t do the situation justice.”
Despite that, many of the platform’s top streamers have been quite casual about the situation.
“Hey, @twitch EXPLAIN?”xQc tweeted. Amouranth replied with a laughing emoji and the text, “This is our version of the Pandora papers.”
Meanwhile, Pokimane tweeted, “at least people can’t over-exaggerate me ‘making millions a month off my viewers’ anymore.”
Others, such as Moistcr1tikal and HasanAbi argued that their Twitch earning are already public information given that they can be easily determined with simple calculations.
Could More Data Come Out?
This may not be the end of the leak, which was labeled as “part one.” If true, there’s no reason to think that the leakers wouldn’t publish a part two.
For example, they don’t seem to be too fond of Twitch and said they hope this data dump “foster[s] more disruption and competition in the online video streaming space.”
They added that the platform is a “disgusting toxic cesspool” and included the hashtag #DoBetterTwitch, which has been used in recent weeks to drive boycotts against the platform as smaller creators protest the ease at which trolls can use bots to spam their chats with racist, sexist, and homophobic messages.
Still, this leak does appear to lack one notable set of data: password and address information of Twitch users.
That doesn’t necessarily mean the leakers don’t have it. It could just mean they are only currently interested in sharing Twitch’s big secrets.
Regardless, Twitch users and creators are being strongly urged to change their passwords as soon as possible and enable two-factor authentication.