Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

twitter.com

Post reply on HN
Print view View original

411–420 of 613 posts

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#411

Post by dmonitor »

speedyapoc wrote: post #18

I know there are a few apps which will check the clipboard in order to provide functionality to the user. For example, some shipping apps will check the clipboard to see if the user has a copied tracking code and if so, ask the user if they want to track their copied code. Not sure if TikTok does something similar, but there are certainly innocent reasons for checking the clipboard.

Chrome accesses the clipboard every time you touch the address bar to check if you have a URL to go to. Safari does the same, but without a pop up. Apple must be cheating somehow because even they know how annoying it is.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#412

Post by WA »

awolf wrote: post #404
WA wrote: post #388

Earlier quoted context omitted.

I am certainly happy about the steady pro-privacy process. I personally consider Apple full of shit until two features are released: 1. Contact sharing needs a complete overhaul. Some apps need to have access to my contacts. I get this. But they only need the name and the phone number. They don’t need addresses, birthdays and additional notes I put in m contacts. Sure, I could have a separate contacts app with "meta…

Both added in iOS 14. I guess Apple's not "full of shit" anymore.

Photos: just saw it, great news.

Contacts: didn’t find a good source. This talks about "contacts autofill", not sure what that means exactly: https://www.apple.com/ios/ios-14-preview/features/

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#413

Post by jmiserez »

WA wrote: post #389
DaiPlusPlus wrote: post #216

Earlier quoted context omitted.

Fine-grained permissions aren’t useful if an application is going to request access to everything anyway - and non-technical or non-privacy-conscious users will click-through any and all permission prompts so [they can see the dancing bunnies]( https://blog.codinghorror.com/the-dancing-bunnies-problem/ ). In the case of very popular, aggressively-marketed, apps like TikTok and Facebook’s: the lack of easy side-loadin…

> Fine-grained permissions aren’t useful if an application is going to request access to everything anyway If you build it right, it is totally doable. Implement it like in Health so that the app just gets empty data and doesn’t really know if it has access or not. If the app doesn’t function properly with an empty data set, reject such an app through App Store guidelines.

What the parent poster means is that the second step (enforcement through rejection) won't work anymore.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#414

Post by rahkiin »

luckylion wrote: post #407
katbyte wrote: post #387

Earlier quoted context omitted.

Sounds like it’s working then? If an app asks me for location I personally go wtf no why do you need to know and most apps honestly don’t. I stick with apple for such a reason

The point was "it's an OS feature, not an Appstore feature, so Apple's Walled Garden approach has nothing to do with that feature, Apple's OS has". It's working. But not because of Apple's Appstore policies.

With sideloading apps could use private APIs that circumvent these policies maybe

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#415

Post by frankchn »

ogre_codes wrote: post #337
statictype wrote: post #318

Earlier quoted context omitted.

Well, the problem is we don't know why they are using it. That almost makes the notifications useless. Apple puts app developers through an annoying review process. It seems like the least they could do is check with the developer on why they want that access and see if its legit or not.

> Well, the problem is we don't know why they are using it. > > That almost makes the notifications useless. If your app is checking the clipboard or my location on a frequent basis, it's your job as the developer to communicate to me why you are doing this. If the notifications are frustrating, users will turn off the permissions or remove the application entirely. Crappy snooping applications are gone. Mission acco…

> If the notifications are frustrating, users will turn off the permissions or remove the application entirely. Crappy snooping applications are gone. Mission accomplished.

Will they? That didn’t happen with the UAC dialogs in Windows.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#416

Post by cynix »

judge2020 wrote: post #316
beervirus wrote: post #277

Earlier quoted context omitted.

Why is there programmatic access to my clipboard at any time other than when I click paste?

Not every text box is a Cocoa text box, so the paste functionality might need to be handled via code.

Every text box should be a Cocoa text box.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#417

Post by askafriend »

OldHand2018 wrote: post #150

In the coming days I feel as if we are going to see a lot more threads about the new privacy features in iOS 14. Apple has a video overview of a lot of the new stuff [1]. I suggest watching it (at 2x speed - they talk very slowly). Especially at 16:30 where they emphasize that SDKs are part of your app and that you the developer are fully responsible for the data collection of any SDK you include in your app. This is…

> This is going to be a huge problem for a lot of developers.

The way I see it, it's not a problem it's a responsibility. The problem was the lack of responsibility in the first place.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#418

Post by Nullabillity »

rahkiin wrote: post #414
luckylion wrote: post #407

Earlier quoted context omitted.

The point was "it's an OS feature, not an Appstore feature, so Apple's Walled Garden approach has nothing to do with that feature, Apple's OS has". It's working. But not because of Apple's Appstore policies.

With sideloading apps could use private APIs that circumvent these policies maybe

Then the sandbox is broken..?

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#419

Post by pwdisswordfish2 »

SirensOfTitan wrote: post #32

It seems like a ton of apps are abusing this feature: https://www.youtube.com/watch?v=pRSWdtoUAjo I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: https://old.reddit.com/r/apple/comments/hejb9i/ios14_cat…

"It seems like a ton of apps are abusing this feature:"

Honest question: Why do we need this feature?

As a user, I am happy to sacrafice whatever benefit it provides -- to end users -- to stop the abuse. Obviously the feature provides benefits to app developer personal data collectors.

OK by me to remove feature.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#420

Post by [deleted] »

SirensOfTitan wrote: post #32

It seems like a ton of apps are abusing this feature: https://www.youtube.com/watch?v=pRSWdtoUAjo I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: https://old.reddit.com/r/apple/comments/hejb9i/ios14_cat…

[deleted]
Post reply on HN