You know how some popular apps don't let you out of the app when you click8+ Archivesa link, opening said link in their own little in-app browser instead?
As it turns out, this enables these apps to monitor what you do. And among the most popular apps that do this, TikTok appears to be the worst offender.
In a blog post Thursday, security researcher Felix Krause announced the launch of InAppBrowser, a tool that lists all the JavaScript commands executed by an iOS app as its in-app browser renders a webpage.
To show what the tool can do, Krause analyzed some popular iOS apps that have an in-app browser, and the results are disturbing. Krause's data shows that apps including TikTok, Instagram, Facebook Messenger, and Facebook, all modify webpages that are opened in the in-app browser. "This includes adding tracking code (like inputs, text selections, taps, etc.), injecting external JavaScript files, as well as creating new HTML elements," Krause says. They also fetch website metadata, though Krause says this is "harmless."
SEE ALSO: TikTok is a growing source of news among UK adultsWhen Krause dug a little deeper into what these apps' in-app browsers really do, he'd found that TikTok does some bad things, including monitoring all of users' keyboard inputs and taps. So, if you open a web page inside of TikTok's app, and enter your credit card details there, TikTok can access all of those details. TikTok is also the only app, out of all the apps Krause has looked into, that doesn't even offer an option to open the link in the device's default browser, forcing you to go through its own in-app browser.
UPDATE: Aug. 23, 2022, 9:59 a.m. EDT In a chat with Motherboard, Krause explained that his report "doesn’t say TikTok is actually recording and using this data." TikTok told the outlet that his findings are "incorrect and misleading.""We do not collect keystroke or text inputs through this code, which is solely used for debugging, troubleshooting, and performance monitoring,” a TikTok spokesperson said.
Check out Motherboard's article.
In a statement to Forbes, a TikTok spokesperson confirmed the practice, but says that "the Javascript code in question is used only for debugging, troubleshooting, and performance monitoring of that experience."
It's all needed to provide "an optimal user experience," she said.
Other apps Krause has looked at, like Instagram, also do some monitoring of their own, though none of them go as far as TikTok. And Snapchat and Robinhood are good examples, as they don't modify webpages or fetch their metadata of the sites you open in their in-app browsers.
Krause warns that apps actually have a way of hiding their JavaScript activity from his InAppBrowser tool, meaning they could be doing more monitoring behind the scenes. For now, the only way to make sure they can't do any monitoring is to open websites in the device's default browser — if the app even offers this option.
Topics TikTok
Syrian artist makes suitcase dioramas of homes refugees left behindHundreds of thousands of unsold Snap Spectacles are wasting away in a warehouse'Last Jedi' director drops hints about Leia's fate6 ways founders can avoid making big mistakes while growing their companyFacebook's auto translation AI fail leads to a nightmare for a Palestinian man'Stranger Things' Spotify Easter egg will take you to the Upside DownJohn Legend helped these students redefine masculinity through poetryYou have to see the motionUberEats starts delivering McDonald's in Singapore, Malaysia nextWhat's coming to Hulu in November 2017Megyn Kelly calls out Bill O'Reilly and Fox NewsRobert Guillaume, voice of Rafiki in 'The Lion King', dies aged 89'The Simpsons' Puerto Rico message gets a thank you from San Juan's mayorDOJ will stop forcing tech companies to stay quiet as it collects dataFBI calls smartphone encryption a 'huge problem'Amazon Wine is shutting downA man flew across South Africa strapped to balloons in 'Up'Amazon's Joe Lewis and Conrad Riggs exit after Roy Price's resignationA man flew across South Africa strapped to balloons in 'Up'Chicago bar opens up a Moe's Tavern pop Review: 'Hustlers' is as a great time with a powerful message Hands on with the improved Galaxy Fold: This one probably won't break 13 striking photos that capture India's 68th Republic Day preparations Former James Bond Pierce Brosnan thinks it's time for a woman to play the role 'Just Mercy' puts Michael B. Jordan in the awards race: Review 'The Goldfinch' movie drums up very strong reactions from critics Gov. Brown declares war on Trump's 'alternate universe of non Playboy Club returning to NYC after 30 years, for better or worse Trump inspires a new era of music The easiest ways to legally follow the NFL this season without cable Trump's voter fraud investigation may want to start with his own daughter Russia accuses Google, Facebook of election interference CNN trolls Trump China's latest beauty app takes Snapchat Trump the business is already benefitting from Trump the president #ICantKeepQuiet: How an emotional song of empowerment went viral after the Women's March ABC News used a fake image of Trump in the White House and is anything real? No, PlayStation. The 'X' button is not actually the 'Cross' button. Louis Tomlinson has no idea what a hedgehog looks like Rumor: iPhone 2020 will have all
2.6757s , 8225.453125 kb
Copyright © 2025 Powered by 【18+ Archives】,New Knowledge Information Network