Earlier quoted context omitted.
How is this a violation against the CFAA?
Unauthorized network access? Literally the whole point of the thing.
[deleted]
TikTok requests access to devices on local network
91–100 of 158 posts
Re: TikTok requests access to devices on local network
#92For some technical context: this dialog pops up the first time an app attempts to send a packet to a local device. A "common" reason why this happens are actually your own network devices if you're connected on wifi. For instance sending a custom DNS query to the wifi advertised DNS server (if it's the router) will cause that dialog. Same thing happens if you happen to have a router redirect certain resources to itse…
Thanks for the details!
That opens new questions; for example, what's a "custom" DNS query? One that doesn't use mDNSResponder (or whatever iOS uses right now)?
Re: TikTok requests access to devices on local network
#93Just to add: Scanning networks to gather data seems pretty popular these days - smart tvs have done so, and even the ebay site used to portscan visitors [1]. [edit] And of course, there's WebRTC leaking your local IP - which ublock origin can specifically block [2]. [1] https://www.bleepingcomputer.com/news/security/ebay-port-sca... [2] https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-l...
Is this separate from mDNS [1]? A lot of smart TVs and PCs increasingly use mDNS to support some fairly handy consumer features, like AirDrop, being able to setup your TV with your phone, network printing/scanning, ChromeCast, whole-home control of lights & other IoT devices, etc. [1] https://en.wikipedia.org/wiki/Multicast_DNS
The incident I'm referring to was about LG [1]. The report includes network captures, so I'd trust it.
Apparently, some chinese smart TV brands have been doing similar things, but I wouldn't be surprised if most other vendors have caught up and used stealthier techniques.
[edit] Here's the news about those chinese TVs [2] and the original report [3]
[1] https://arstechnica.com/information-technology/2013/11/lg-sm...
[2] https://www.theregister.com/2021/05/04/skyworth_gozen_smart_...
Re: TikTok requests access to devices on local network
#94Re: TikTok requests access to devices on local network
#95Re: TikTok requests access to devices on local network
#96They used to check your clipboard the whole time too. They use the local network as one of their sensors to identify you (fingerprinting). However they have plenty more (see their privacy policy).
Is there a way to check if a website does read your clipboard. I know you have to interact with the site, so they can read it. So in theorie, a website can read your clipboard every time you click on something, is this true?
Re: TikTok requests access to devices on local network
#97Earlier quoted context omitted.
Unauthorized network access? Literally the whole point of the thing.
I would argue the point was the opposite. It began with a request for authorization.
I don't see how this is any different than walking into a building and telling the concierge you're a maintenance worker.
Re: TikTok requests access to devices on local network
#98Earlier quoted context omitted.
Because that’s how is used. The concept of apps and web sites being separate things, or being different, or preferable to one another isn’t on the radar of 95% of people, it’s a blurry shapeless vagueness the mind glazes over if it’s ever forced into recognizing its existence, and immediately discarded afterwards. You’re asking a forum of power users/creators, where a loud minority completely unironically still use d…
> a loud minority completely unironically still use desktop & laptop computers for activities besides work. Is using a desktop or laptop for non-work activities ironic somehow?
I honestly don’t know what exactly irony means.
unironically = sincerely/earnestly
Re: TikTok requests access to devices on local network
#99They used to check your clipboard the whole time too. They use the local network as one of their sensors to identify you (fingerprinting). However they have plenty more (see their privacy policy).
>> They used to check your clipboard the whole time too. That's a design error on the UI side. An app should not have read access to the clipboard, it should have the ability to accept data from the clipboard when the user pastes it.
The problem is with clipboard access is because apps abuse it not because it's a problem that have read access at all. Google Maps pulling my clipboard which has an address in it as the top suggestion for destinations is a good thing and respect the user's time.
Re: TikTok requests access to devices on local network
#100They used to check your clipboard the whole time too. They use the local network as one of their sensors to identify you (fingerprinting). However they have plenty more (see their privacy policy).
Is there a way to check if a website does read your clipboard. I know you have to interact with the site, so they can read it. So in theorie, a website can read your clipboard every time you click on something, is this true?
AFAIK it's not, reading the clipboard requires an explicit "paste" command triggered by the user or an explicitly granted permission.