Live data from Hacker News

iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

twitter.com

301–310 of 613 posts

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#301
post #252

Earlier quoted context omitted.

Kind of unrelated, but what phones do you use? Also, can you still use Google apps?

You can still use Google Apps, but they must be sideloaded as part of the installation process before you boot LineageOS the first time. I haven't found a LineageOS device that will pass the SafetyNet checks yet, though. Is LineageOS still signed with testing keys?

My Galaxy S5 with Lineageos 16 and Magisk passes safetynet.. Thanks to Magisk.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#302

Earlier quoted context omitted.

As opposed to apple which isn't because... apple says so.

No, because Apple makes money on subscriptions and retail purchases not on aggregating and reselling the data for advertisers.

Whatever happened to the concerns around Apple selling in China and what compromises they may have made for that?

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#303
post #166

Earlier quoted context omitted.

So google also sends the contents of my clipboard to their servers when I use their app? Wonderful.

I can't imagine being one of the PMs/higher-ups that decided to allow clipboard content to be shared willy-nilly like this. Like, what must be going through their minds when they make decisions like this? "User experience at all costs?" Seems contrary to their stance on privacy.

Personally I couldn't care less about google seeing whatever junk I sometimes have in my clipboard if it means I can more quickly go to the address I'm looking for

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#304

Earlier quoted context omitted.

How is users having to trust third-party developers about privacy features in a ROM different to users having to trust Apple?

Anybody can have a look at the ROM to see if it makes sense whereas only Apple can realistically audit the iPhone.

You say “anybody” But I’m not a programmer, I would have no idea what I’m looking at. And trust me, neither would the vast majority of humans.

Beyond that, have you considered the actual average user? You either never worked tech support or forgot. It’s bad out there, it’s like people are moving backwards with computer skills because of phones.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#306

It seems like a ton of apps are abusing this feature: https://www.youtube.com/watch?v=pRSWdtoUAjo I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: https://old.reddit.com/r/apple/comments/hejb9i/ios14_cat…

People love to hate on Apple but the fact is, they continue to release features to better showcase or restrict developers that abuse your privacy. The "walled garden" also ensures they apply a ton of checks to apps to better restrict abuses. Sometimes it's overly sensitive and bad things happen, but in general it's awesome that over time it becomes harder and harder to get away with apps blatantly spying on you.

Do you know if the new ios will bring back (?) fine grain controls over microphone access? You can either give rights to an app for access or no access at all, which is really bad and IIRC through the "while using only" option in ios versions before was more respecting of customer privacy. If Apple removed granular mic controls before the current ios version, I really don't understand why.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#307
post #210

Earlier quoted context omitted.

The walled garden does no such thing. Either iOS is secure or it's not. if it's secure there is no need for the walled garden. Let me run anything and trust its security. If it's not secure then the walled garden is security theater because it's trivial for any app to hide its true intent.

> Either iOS is secure or it's not This is flat out wrong. Security isn't binary.

The point of the comment isn't to claim security is binary, but rather that if we're making a distinction between "secure" or "not secure", the walled garden contributes nothing to the distinction.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#308

Whats the point of having an App Store as the gatekeeper for installing apps if you aren’t going to catch this shit?

I believe iOS14 has features to detect this: https://www.reddit.com/r/apple/comments/hejb9i/ios14_catches...

Yes - I mean why hasn't the App Store review process already caught this in previous versions of iOS? Why do we need to wait for the technical capability to be surfaced to users?

How are we supposed to know if the app's continuous request for clipboard access is ok or not?

I feel like that was literally the only value-add in the App Store review process and the fact that its a feature in iOS seems to indicate that Apple is throwing in the towel here and saying "we don't know if this is a privacy issue or not so we will just notify you about it".

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#309
post #29

It looks like there could be a reasonable explanation for this. There are apps that have different behavior whether or not there is text in the clipboard (e.g. enabling a "paste" button), and they're only checking that the text exists, not what it is. There's a new API that will let devs do that without triggering the user notification. If TikTok is actually constantly loading the clipboard, that's obviously terrible…

> There are apps that have different behavior whether or not there is text in the clipboard (e.g. enabling a "paste" button) People keep saying this but I've never seen one of these app-specific paste widgets. And even if I did, I wouldn't miss it in the slightest for the sake of not allowing every app to be reading my clipboard at all times . It's inexcusable to me that there isn't a permissions prompt for this. Two…

> People keep saying this but I've never seen one of these app-specific paste widgets

The Google Translate app does.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#310

Earlier quoted context omitted.

Agreed. Reading the clipboard should require the user to choose "paste" just like the browser does. You can't read it unless the user expressly trying to paste into your app.

JavaScript can manipulate the contents of your clipboard without any interaction from the user. It's not just apps that can do this.

[deleted]
Post reply on HN