Live data from Hacker News

iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

twitter.com

231–240 of 613 posts

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#232

Earlier quoted context omitted.

That's like saying that freedom of speech should be banned because most people have nothing to say. User rights needs to be there for the people who need it. The iPhone is currently a black box where it's very hard to know what is happening in it, that's a big issue in terms of privacy and accountability of the platform, not to mention the anti-competitive behaviours.

Is there a practical solution that isn’t a black box? For the general population, not enthusiasts.

Yes, there's a whole market for Android devices which are both opened and very secure.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#233

Earlier quoted context omitted.

As opposed to apple which isn't because... apple says so.

No, because Apple makes money on subscriptions and retail purchases not on aggregating and reselling the data for advertisers.

Apple also makes money by selling their users to Google to do all that nasty stuff.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#234

Earlier quoted context omitted.

It is honestly still kind of crazy that Apple still hasn't fixed this gaping hole in their security model, along with others. A notification is not solving the problem. I wonder if Apple is playing 4D chess here though. As people learn about this, they will become outraged and care more about privacy. This in turn benefits Apple since that's their marketing stance. I wish they just cut the bullshit and fixed these ho…

Agreed. Reading the clipboard should require the user to choose "paste" just like the browser does. You can't read it unless the user expressly trying to paste into your app.

This is true for nearly all apps, but it is important to consider special cases. I use a keyboard app (SwiftKey) that shows contents of clipboard, if recently added, as a shortcut button. It's pretty nice. I can probably turn it off but I don't intend to.

Accessibility apps likely have a lot of examples like this too

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#235

Earlier quoted context omitted.

Phones only getting 2 major software updates (which are released yearly, so 2 years) is a bit of a deal breaker for me. I understand older versions of Android are pretty well supported at least by apps in Google Play. Also what bothers me about Android devices: I got a Galaxy S8 to do development for work, and not all manufacturers are created equal in updates of course; IIRC I waited almost a full year after the Goo…

Why did you even need a physical phone? Emulator works fine for most development use cases.

I think you just answered your own question. Emulators work fine for most use cases. In the other cases, a physical phone is best.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#236
post #114

Earlier quoted context omitted.

I've only ever been an Android user, but for a while I was paying a lot of attention to iOS too. It seems to me like they've been back and forthing, as one side figures out some improvements, the other side more-or-less re-implements them on their next release with their own unrelated improvements. Seems like a good thing, really.

From my perspective it seems like Apple keeps releasing new privacy features and Android keeps being forced to catch up. What are the major privacy enhancements that Google has put out first?

I believe Android was the first to have fine grained app permissions where you could actually choose what an app has access to. iOS added that later.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#237
post #123

Earlier quoted context omitted.

It is true that many vendors abandon their devices more quickly than I would like, but it depends on the vendor and the "flagshipness" of the device. Also, since version 8.0, Google has made a number of improvements to the modularity of the OS which make it easier for vendors to release updates ("Project Treble"), so the problem has been reduced somewhat

While fact checking my other comment here, it seems like Samsung has been slow to roll out major version upgrades _since_ Android 8. Have other manufacturers improved in this regard since Project Treble?

Motorola's pretty on top of the game.

$200 G7 got Android 10 about 3 weeks ago.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#238

Earlier quoted context omitted.

I'm disappointed that so many people think "hey they could just be doing this for innocuous reasons" instead of "oh maybe nobody should be doing this even if it's the absolutely most straightforward way to do it." Even if you're only looking for a shipping tracking number and then only so that you can provide useful auto-populate, will you lose out by only checking the clipboard when the user hits your text input fie…

This is a OS bug not an app bug. You can't expect millions of app developers to get this right. An app should not be allowed to read the clipboard until a user chooses to "paste". That's on the OS for allowing this behavior. It's silly to think that making it possible to read the clipboard at any time that some how all millions of app developers will use it correctly even if they have no malicious intent.

A high speed collision happens on a freeway, killing both drivers. This is a car manufacturer bug, not a human bug. You can't expect millions of drivers to get driving right. A car should not be allowed to drive fast.

How about: stop apologizing for billion dollar corporations. Fault can be placed on both the OS and applications. I expect better, from everyone.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#239

I know there are a few apps which will check the clipboard in order to provide functionality to the user. For example, some shipping apps will check the clipboard to see if the user has a copied tracking code and if so, ask the user if they want to track their copied code. Not sure if TikTok does something similar, but there are certainly innocent reasons for checking the clipboard.

Deliveries on my iPhone does this. Though I’m pretty sure if apple opened up a API that would allow you to provide a hard coded Regex it would solve a number of privacy issues.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#240

Earlier quoted context omitted.

Was it called iPhone OS then? At some point I remember Apple saying it was basically OS X running on the phone. Weird how that went.

The first iPhone used iPhone OS. It was never called OSX in production. In June 2010 it was renamed iOS.

However they did call it OSX in the keynote: https://youtu.be/vN4U5FqrOdQ?t=548
Post reply on HN