Lawmakers press TikTok about China and user data in Senate hearing

Top executives from Meta, Twitter, YouTube and TikTok just wrapped up a three-hour hearing in front of the Senate Homeland Security Committee. The hearing, which featured Meta CPO Chris Cox, YouTube CPO Neal Mohan, TikTok COO Vanessa Pappas and Twitter’s GM of consumer product (known as “Bluebird”), was meant to be focused on how their services impact national security issues.

Notably, the hearing is only the second time representatives for TikTok and YouTube had ever appeared at such a hearing — Meta and Twitter execs have been hauled in front of Congress far more often — and the first dedicated to security. The hearing also came one day after Twitter’s former security chief turned whistleblower told a different Senate committee that the company had been previously warned by the FBI it had a Chinese spy on its payroll. Yet not one senator on the Homeland Security Committee asked Sullivan about the allegation.

To be clear, Sullivan was unlikely to have given a substantive answer. When asked about whistleblower Peiter Zatko’s claim that Twitter lied to the FTC, he would only say that “Twitter disputes the allegations.” But it was still somewhat shocking that the issue was not raised in a hearing dedicated to social media platforms’ impact on national security. 

Lawmakers did, however, spend considerable time questioning Pappas on TikTok’s connections to China, which has long been a source of suspicion among lawmakers on both sides of the aisle.”TikTok does not operate in China,” Pappas said more than once.

At one point, Sen. Josh Hawley got into a heated exchange with Pappas over whether the company has China-based employees who are members of the Chinese Communist Party. “We’ve said many times, Senator, that we do have Chinese engineers based in China,” Pappas said. “I don’t think there’s any platform up here that would be able to speak to what you’re talking about as it relates to the political affiliation of an individual.” She later added that the company’s leadership team is based in the United States and Singapore.

Pappas was also asked about a BuzzFeed News story that TikTok user data had been repeatedly accessed by employees based in China. She said that “those allegations were not found,” and emphasized the company’s “strict access controls” and its work with Oracle.

The TikTok COO was also questioned about the app’s use of biometric data. “We do not use any sort of a facial, voice, audio or body recognition that would identify an individual,” Pappas told Sen. Kristen Sinema. She added that facial recognition is used for augmented reality effects in creators’ videos.

There was a lot less discussion of other security-related issues, including social media companies’ handling of domestic extremism. Committee Chairman Sen. Gary Peters pressed Cox and Mohan and why Meta and YouTube didn’t crack down on QAnon more quickly. Both side-stepped the question by focusing on their current policies. Other lawmakers chose to spend their time questioning the companies about their handling of vaccine misinformation during the pandemic and other content moderation issues. 

And, as with previous hearings, the executives were often reluctant to provide specific answers even to seemingly straightforward questions. Peters repeatedly asked each executive how many engineers each company had on staff — a question he said they were notified would be coming in advance — but none would give a direct answer. “I’ll be honest, I’m frustrated that chief product officers — all of you have a prominent seat at the table where these business decisions are made — were not more prepared,” Peters said. “Your companies continue to really avoid you sharing some very important information with us.”

Twitter shareholders vote to approve Elon Musk’s $44 billion acquisition

A majority of Twitter’s shareholders have voted to approve Elon Musk’s $44 billion takeover. During a special meeting of shareholders that lasted about seven minutes, stockholders approved of two proposals: one to adopt the merger agreement with Musk, and one related to how the company’s executives will be compensated as a result of the deal.

Both measures were approved, though Twitter will disclose the final breakdown of votes “at a later date” when it files paperwork with the Securities and Exchange Commission.

Though shareholders formally approved the deal, which valued each share at $54.20, an October trial in Delaware’s Court of Chancery will determine whether Musk is able to terminate the agreement. Musk initially cited concerns about bots and spam as reasons for ending the merger agreement, though Twitter’s lawyers argued he was actually concerned about “World War 3.” The judge in the case ruled that Musk will be able to add claims raised by the company’s former security chief turned whistleblower, Peiter Zatko, to his legal bid.

Separately, Zatko testified at a Judiciary Committee hearing Tuesday, during which he shed new light on his allegations that Twitter’s security practices are a risk to the United States’ national security.

Twitter whistleblower says company had Chinese agent on payroll

During a hearing with the Senate Judiciary Committee, Twitter’s former security chief turned whistleblower, Peiter Zatko, shed new light on his claims that the company’s lax security practices harmed U.S. national security. Among the new allegations was that the company had a Chinese agent working for the country’s Ministry of State Security (MSS) on its payroll.

During his opening statement, Sen. Chuck Grassley stated that “the FBI notified Twitter of at least one Chinese agent in the company.” In the public version of his whistleblower complaint, Zatko stated he had been warned that the company was employing “one or more” people who were “working on behalf of another particular foreign intelligence agency.” But the version of the complaint made public, parts of which were redacted, didn’t specify what country the FBI was referring to.

In his testimony, Zatko confirmed the company had been warned about the presence of Chinese agents. “This was made aware to me maybe a week before I was summarily dismissed,” Zatko said. “I had been told because the corporate security/physical security team had been contacted and told that there was at least one agent of the MSS, which is one of China’s intelligence services on the payroll inside Twitter.”

Zatko also raised concerns about the presence of foreign agents from other countries, including India, which he said “forced” Twitter to hire government agents. 

Notably, Zatko’s disclosures are not the first time Twitter has had to contend with the presence of unregistered foreign agents on its payroll. A former Twitter worker was recently convicted of acting as an agent for Saudi Arabia. Prosecutors alleged the man was paid to turn over sensitive information about dissidents.

Zatko alleged that the danger posed by foreign agents was even greater due to a litany of factors: the vast amount of data the platform collects and its lack of insight into that data, as well as the broad and largely unfettered access Twitter’s engineers have to it. “It’s not far-fetched to say that an employee inside the company could take over the accounts of all of the senators in this room,” Zatko said. 

The hearing is likely to amp up the pressure on Twitter, which has so far declined to address Zatko’s claims in detail. Senator Grassley said that the committee had also invited CEO Parag Agrawal to testify at the hearing but that he had “refused to appear.”

“He rejected this committee’s invitation to appear by claiming that it would jeopardize Twitter’s ongoing litigation Mr. Musk,” Grassley said, referring to the company’s legal battle with Elon Musk over his $44 billion acquisition of the company. “Protecting Americans from foreign influence is more important than Twitter’s civil litigation in Delaware. If these allegations are true, I don’t see how Mr. Agrawal can maintain his position at Twitter going forward.”