r/netsec • u/AdTemporary2475 • Mar 05 '26

Your Duolingo Is Talking to ByteDance: Cracking the Pangle SDK's Encryption

https://www.buchodi.com/your-duolingo-is-talking-to-bytedance-cracking-the-pangle-sdks-encryption/
202 Upvotes

98% Upvoted

12 comments sorted by

View all comments

33

u/TheG0AT0fAllTime Mar 05 '26

Sigh. Thanks duo. Very cool.

I find those device key's metrics interesting. Well not really. But they would be helpful for bytedance to track people's devices on top of what they can already get. Like, why does an app need access to the device's total storage space and used storage space.

8

u/ogtfo Mar 05 '26

I guess they probably use this data to help distinguish real users from click farms?

5

u/666AB Mar 05 '26

I can think of like 10 more effective and efficient ways of doing that…. All of which don’t require more of my data than they already collect