Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

twitter.com

Post reply on HN
Print view View original

561–570 of 613 posts

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#561

Post by m4rtink »

Moru wrote: post #507
m4rtink wrote: post #503

Earlier quoted context omitted.

So then why people can't run their hand inspected code on their iOS devices they own ? Why can't people run good privacy respecting GPLv3 licensed applications ? The walled garden actually makes it harder to run software you and others can check to be sucure, instead you have to depend on some opaque QA somewhere in Apple to check that for you. Not to mention you can't elect to use software that has features blocked…

That's not what iPhones are for. The android market is more for the tinkerer historically, Apple is just supposed to work the way it was intended, always was that way. Android is moving that direction too so not sure what to choose now?

Well, I have never used Android or iOS on my primary mobile device - went directly from cell phone to Maemo on Nokia N900, then MeeGo on Nokia N9 to Sailfish OS where I am to this day, running Sailfiosh OS on supported Xperia devices.

Hopefully, with reasonably open mobile hardware (PinePhone) other open mobile OS efforts will get more traction now, as the main obstacle of mobile OS development to this day has always been closed hardware & all the crapy proprietary software bundled with it.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#562

Post by JTbane »

abakker wrote: post #290
riquito wrote: post #215

Earlier quoted context omitted.

So if you can choose between pure and not pure, locked vs unlocked, is worse? Interesting selling point

For some of us, having a locked down, reliable, secure, and pure phone is a great solution. I don’t want iOS on my random experimental project laptop, for that I have Linux or windows, or vms. But, cellphones are not something I need to hack around on.

>cellphones are not something I need to hack around on.

Different strokes for different folks. I like having the ability to sideload apps and flash a different OS to my phone

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#563

Post by jclardy »

signal11 wrote: post #529
tomduncalf wrote: post #400

Earlier quoted context omitted.

Looks like photos is addressed in iOS 14 https://appleinsider.com/articles/20/06/24/apple-fine-tunes-... Agree tighter control over contacts sharing would be nice but I don’t think it’s malicious on Apple’s part that this isn’t possible - they’ve quite clearly shown they are on the side of user privacy, but they do also tend to move at a fairly slow pace

This seems to increase the amount of work a user has to do in practice. I suspect most users will end up sharing the entire library. From the link above: > There's also the entirely new option Select Photos..., which leads the user through to the Camera Roll to pick one or more images to share. It is specifically images that users can opt to share, rather than albums. > Which then means there is an issue that the nex…

From using my app on iOS 14 it appears the way it works is based on you accessing the photos library. So it goes like this:

Initial launch - user chooses a few photos. User switches apps, and returns - the same photos are selected. User force quits app (or doesn't use app for a few days and it gets killed off) User opens app, and is then prompted whether they want to "Keep Current Selection" or "Select More Photos" the first time the app accesses the photo library in some way (I think this is based on when you do a photo permissions check, but not positive.)

#3 has existed since the iPhone added apps - UIImagePickerViewController - if you use it, you don't need photo permissions and you only get access to the photo the user selected. Most social media apps probably just skip using this because they want photos permission everywhere to do things like "post latest photo" or to show their own photo picker UI.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#564

Post by SubiculumCode »

efreak wrote: post #294
Polylactic_acid wrote: post #207

Earlier quoted context omitted.

I used to use linageOS no gapps and I loved it but then my nexus 5x died and I got a pixel 2 and linageOS support stopped at the pixel 1. It seems to me that the age of custom roms is over. Android got good enough that the only reason for a custom rom was privacy and extended updates. Since the pixel 2 is still updated there is no reason other than privacy and I guess no one was willing to put in the work for just th…

> Since the pixel 2 is still updated there is no reason other than privacy Features. - The ability to run Android without Google. - The ability to change the location of your clock. - The ability to have some apps open with the status bar and navbar and some not. - The ability to change your WiFi network without opening settings (yes, I'm still upset they removed that. I use an Android 8 tablet daily, so I'm unlikely…

Still, it doesn't support my phone....the only thing that keeps me from jumping on Lineage.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#565

Post by on_and_off »

xvector wrote: post #185
PatrolX wrote: post #124

Here's a test you should run. Create a bitly account if you don't have one and login and create a bitly link for anything, it doesn't matter what it is. Copy that bitly link to your clipboard and repeat what you're doing in that video. Monitor the bitly link for clicks. Better still do it on a website you control with a unique URL that won't get indexed by a search engine and monitor the web server log files for hits…

It is honestly still kind of crazy that Apple still hasn't fixed this gaping hole in their security model, along with others. A notification is not solving the problem. I wonder if Apple is playing 4D chess here though. As people learn about this, they will become outraged and care more about privacy. This in turn benefits Apple since that's their marketing stance. I wish they just cut the bullshit and fixed these ho…

>I wonder if Apple is playing 4D chess here though

Ockham's razor says that they just don't care enough about this.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#566

Post by sbuk »

lwhi wrote: post #452
sbuk wrote: post #448

Earlier quoted context omitted.

It’s still about trust.

There's nothing to be gained by trusting a large corporation. By defending user privacy, Apple is able to have a direct affect on the bottom line of its rival corporations. All corporations behave according to incentives that will help they to progress further than their competitors. If they don't rival coporations will take the lead.

So should why should I trust anyone? The crux of these arguments is essentially anti-capitalism. That’s fine. But be upfront about it. There is a debate to be had around the ethics of privacy in a capitalist free market economy. In this instance, for me at least, Apple is the devil I know. Your point around trusting corporations is totally valid, but I’ve yet to see a similarly valid argument for trusting open source projects. “You can read/compile the source code” is only valid if it is all encompassing. At some point in that line of argument trust still has to be deferred.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#567

Post by rhizome »

avh02 wrote: post #41
rhizome wrote: post #23

Earlier quoted context omitted.

"Surprise" is not a good standard for concern.

Depends on what you're doing, driving or flying - you don't want surprises, they'd definitely be concerning. Privacy too in my opinion.

You're driving along and get t-boned by a semi. Someone says, "I don't know why anybody's surprised, the crash happened at an intersection where two roads cross perpendicularly, and vehicles are traveling on those roads," are you going to nod at their profound observation?

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#568

Post by sergeykish »

tedivm wrote: post #114
patrickyeon wrote: post #84

Earlier quoted context omitted.

I've only ever been an Android user, but for a while I was paying a lot of attention to iOS too. It seems to me like they've been back and forthing, as one side figures out some improvements, the other side more-or-less re-implements them on their next release with their own unrelated improvements. Seems like a good thing, really.

From my perspective it seems like Apple keeps releasing new privacy features and Android keeps being forced to catch up. What are the major privacy enhancements that Google has put out first?

That's how Apple users feel in general.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#569

Post by Spivak »

yreg wrote: post #441
greggman3 wrote: post #334

Earlier quoted context omitted.

Manipulating the clipboard is not the problem, reading it is. AFAIK there is no way to read the clipboard from JavaScript without user interaction. If there is please post a repo. It used to be true but all that was fixed like 10 years ago.

How is manipulating clipboard not a problem? What if something replaces your fingerprint or bitcoin address?

An app being able to declare some operations to perform on the clipboard (overwrite, append, etc) that don't return any information about the contents are not a problem from a privacy or security perspective. At most they can be annoying.

Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes

#570

Post by HeadsUpHigh »

kabacha wrote: post #460
HeadsUpHigh wrote: post #378

Earlier quoted context omitted.

Ah yes permissions: "-This clock app needs to access your photos, contacts, all the hardware the phone has and all your cloud accounts -No -The app can not function without the required permissions."

Yes and the app gets uninstalled and review bombed on google's play store. Seems like a successful democratic process to me.

Time to make a new clock/flashlight/garbage game app I guess!!!
Post reply on HN