Dou Bao Denies Security Flaws Amid Online Speculation
Dou Bao Responds to Security Concerns
The Douyin Assistant team at ByteDance broke its silence yesterday regarding growing online speculation about potential security vulnerabilities in its popular mobile assistant app. In a strongly worded statement, the company dismissed these claims as "malicious hype" and pointed fingers at what it calls organized black PR activities.
No Formal Reports Received
Despite establishing a dedicated security vulnerability response platform during the recent Spring Festival surge in users, the team maintains they've received zero detailed reports about actual flaws in Dou Bao's system. "We operate strictly within China's cybersecurity regulations," the statement reads, "and unauthorized public disclosure of supposed vulnerabilities actually violates these laws."

Addressing Viral Demonstrations
The company specifically addressed viral videos showing potential security bypasses. These demonstrations, according to ByteDance, require active user participation - essentially telling the AI to read malicious content. "Without explicit user instructions," clarifies the statement, "Dou Bao won't automatically perform risky operations." Still, as a precautionary measure, engineers have already implemented upgrades against the attack methods shown.
Cutting Through the Noise
The timing raises eyebrows - coming just as Dou Bao gains traction with holiday users testing its advanced screen recognition features. The team reminds critics that similar automated operation capabilities exist in flagship smartphones worldwide. Their preview version remains in testing, with security protections evolving based on real user feedback.
Legal Action Threatened
The statement concludes with unusually strong language for corporate communications: "Creating vulnerabilities without authorization and spreading unverified safety concerns constitutes black PR." ByteDance confirms it has preserved evidence and may pursue legal action against those behind what it views as manufactured controversy.
Key Points:
- No verified vulnerabilities reported through official channels
- Protective measures upgraded despite unsubstantiated claims
- Viral demonstrations require active user participation
- Company threatens legal action against alleged black PR campaign




