Live data from Hacker News

iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

twitter.com

491–500 of 613 posts

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#491

It seems like a ton of apps are abusing this feature: https://www.youtube.com/watch?v=pRSWdtoUAjo I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: https://old.reddit.com/r/apple/comments/hejb9i/ios14_cat…

People love to hate on Apple but the fact is, they continue to release features to better showcase or restrict developers that abuse your privacy. The "walled garden" also ensures they apply a ton of checks to apps to better restrict abuses. Sometimes it's overly sensitive and bad things happen, but in general it's awesome that over time it becomes harder and harder to get away with apps blatantly spying on you.

rubbish. if Apple allowed proper introspection this would have been discovered months ago and not just in the latest iOS release.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#492
post #433

Earlier quoted context omitted.

I like parcel tracking apps detecting a tracking number in clipboard

Is it also fine that tracking apps read all your passwords in the clipboard?

Agreed that this downside is not worth the convenience. But, I think iOS 14 provides a great solution to this problem; you can pattern match against the contents of the clipboard without reading the contents. Then you can always read it if it matches.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#493
post #355

Earlier quoted context omitted.

I’m curious, how does Google Docs paste from the clipboard when I click the “paste” button from within the Google Docs UI?

Reading from the clipboard is allowed on a user-triggered event. It's somewhat similar to how Firefox has disallowed auto-playing videos except on user permission or a user-triggered event. Which has been mostly worked around by the bad actors, who use things like mouse-over or scroll to trigger the event.

> Which has been mostly worked around by the bad actors, who use things like mouse-over or scroll to trigger the event.

Somehow I didn't even realize that's how they were getting around it! I just thought, "Dang, I thought I turned that crap off." Good callout.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#494
post #233

Earlier quoted context omitted.

Apple also makes money by selling their users to Google to do all that nasty stuff.

No, they really don't. Remember the fun we had making fun of Apple Maps? Why in the world would Apple have dropped Google as the back end for their original Maps program, right? Well, it was because back in 2011 or so, Google refused to give Apple access to true turn-by-turn navigation features unless Apple gave them more access to user data. Rather than do that, Apple decided to go it themselves, even though that ma…

They really do. Check the other comment on this thread.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#495

Earlier quoted context omitted.

Google payed Apple $12 billion in 2019 to remain the default search engine in Safari. It's a large amount, even for Apple, but they would survive losing that. Besides that, they are even taunting Google by putting DuckDuckGo in their marketing copy: https://www.apple.com/macos/big-sur-preview/ They also started a partnership with them in 2019: https://www.cnet.com/news/apple-maps-gooses-duckduckgo-in-se... I think th…

I really think Apple will buy DuckDuckGo at some point. The question is, to what extent will Apple make DuckDuckGo (or whatever they'll rename it to) available for non-Apple platforms?

If they do, they are buying what exactly? A shell around Bing?

Please, they are not going to leave $10 billion per year on the table.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#496
post #252

Earlier quoted context omitted.

Lineage is a must on any phone I get. I reckon I haven't had a vendor distro on my phone since 2012

Kind of unrelated, but what phones do you use? Also, can you still use Google apps?

No, and I consider that a feature :) I have Zuk Z2, which incidentally is still the only phone in the world that matches my small list of requisites: reasonably modern, not huge, has Lineage support.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#497

It seems like a ton of apps are abusing this feature: https://www.youtube.com/watch?v=pRSWdtoUAjo I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: https://old.reddit.com/r/apple/comments/hejb9i/ios14_cat…

People love to hate on Apple but the fact is, they continue to release features to better showcase or restrict developers that abuse your privacy. The "walled garden" also ensures they apply a ton of checks to apps to better restrict abuses. Sometimes it's overly sensitive and bad things happen, but in general it's awesome that over time it becomes harder and harder to get away with apps blatantly spying on you.

Why not give user the option to chose another app store? There could be many stores like in Ubuntu.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#498
Another reason to do this is support for keyboards with meme gifs and other pictures like kimoji. The way they work is by copying images to clipboard and expecting the user to paste manually. This can be streamlined in apps by checking clipboard contents every once in a while and if it changed to image when the input was in focus assuming the user intended to "type" an image or gif.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#499
post #360

Earlier quoted context omitted.

Do you know if the new ios will bring back (?) fine grain controls over microphone access? You can either give rights to an app for access or no access at all, which is really bad and IIRC through the "while using only" option in ios versions before was more respecting of customer privacy. If Apple removed granular mic controls before the current ios version, I really don't understand why.

What iOS 14 does is it shows you a dot in the status bar when either the camera or microphone is used (with different colors for each). In Control Center it will also show you which App recently used those. So that’s not more fine grained control, but it can help you understand when someone is abusing the permission.

Thanks!

I've asked in the twitter thread if early adopters of iOS 14 could also check if any apps access the microphone while in background (even though they shouldn't have to by use case).

I have the suspicion that some apps listen into conversations to apply speech recognition and NLP for targeted ads and maybe even more malicious practices - though I'm guessing networks close to FB for example would have been smart enough to have turned off those "features" for their apps by now but maybe not.

Still, it would be interesting: https://twitter.com/musha68k/status/1276112945496428544?s=21

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#500

It seems like a ton of apps are abusing this feature: https://www.youtube.com/watch?v=pRSWdtoUAjo I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: https://old.reddit.com/r/apple/comments/hejb9i/ios14_cat…

People love to hate on Apple but the fact is, they continue to release features to better showcase or restrict developers that abuse your privacy. The "walled garden" also ensures they apply a ton of checks to apps to better restrict abuses. Sometimes it's overly sensitive and bad things happen, but in general it's awesome that over time it becomes harder and harder to get away with apps blatantly spying on you.

> but the fact is, they continue to release features to better showcase or restrict developers that abuse your privacy.

On Linux and BSD we've been having very good privacy features for years now.

Therefore I don't think that privacy is at the top of the list of Apple's motives.

Post reply on HN