Live data from Hacker News

Instagram can track anything you do on any website in their in-app browser

krausefx.com

331–340 of 469 posts

Re: Instagram can track anything you do on any website in their in-app browser

#331
post #233

In-App browsers have always been a security nightmare. Similar issues exist with Electron apps as well. But developers continue to use them as HTML + CSS + JS is the easiest way to develop a graphical dynamic UI, for a newbie. Many schools & colleges even teach basic HTML, CSS & JS, so the barrier to entry is very low. I am not sure what a good solution here would be, but maybe we could start by limiting access. Or a…

Good call out on Electron apps, I try to avoid Electron as much as possible. I use Slack's web interface for example.

I never made the connection until you brought it up, but yes, Electron apps are just like using Webkit on iOS. Abstracting UI/UX to a browser engine which has identical security pitfalls to a browser but with far less control and inspection capability.

Re: Instagram can track anything you do on any website in their in-app browser

#332

As a provider is it possible to defend against this with a Content Security Policy or does this mechanism override the site’s CSP?

Strides have been made in web security, check out the permissions policy[0] along with COOP and COEP[1].

[0] https://www.w3.org/TR/permissions-policy-1/ [1] https://scotthelme.co.uk/enabling-coop-and-coep-reports-on-r...

Re: Instagram can track anything you do on any website in their in-app browser

#333
post #282

Earlier quoted context omitted.

I suppose I should have said it's not being talked about by any mainstream authorities or outlets in the same way a lot of women's or equity issues are (not to say porn isn't also a women's issue, it very much is, but seems to disproportionately impact men). It is a shame that any group which advocates men's issues tends to get labeled as right-wing or incelish, which then attracts those types and makes those labels…

I share the same view of the situation as you. A consequence of the increase in demands for justice, political correctness, and stuff like that seems to be that every community has to be focused on a oppressed group or it will be considered right-wing and thus attract people like you said. The incel label is a good example of how bad men are treated sometimes. If you treated poor people like this by saying they're in…

My recollection of the term incel is that it was a self-applied label, not one created from outside the group like your "involuntarily not rich" hypothetical. (Even in that example, though... who's going to tell you you're wrong if your theory is "nobody should simply expect to get rich for showing up and not putting in the work", exactly?)

As to whether or not that group is popular... this is an interesting one since the bonding factor is a lack of relationship success (which is closely related to, but not the same as, popularity) in the first place. But if you look at a lot of how the group that has gathered under that label interacts with the rest of the population... it's hard to say it's just something like mocking them for not being able to get laid. There are a lot of frankly offensive and violent theories pushed by people out there.

It's deeply ironic actually - "I'm not having sexual success, I'm going to start listening more to other men who also have the same problem, they're the ones who will be able to tell me about women." Back when it was a more ironic, non-violent "foreveralone" meme I was in the club... it wasn't increasing my exposure to men that eventually got me out of it.

Re: Instagram can track anything you do on any website in their in-app browser

#334

Earlier quoted context omitted.

I'm glad to see someone mention addicts. I feel as if internet addiction, and especially subsets of it such as porn addiction, aren't given enough weight by either the addiction treatment community or the technical community. Before someone accuses me of being a conservative religious zealot as tends to happen when anyone denounces porn, I'll say that I'm far from a puritan and am extremely liberal in my social views…

You claim to be extremely liberal in your social views but then in the next breath make the assumptions that difficulty forming relationships today is significantly greater than in the past and further that this fact is due to effects that are caused (ultimately) by viewing porn. Those are both very socially conservative viewpoints and I have yet to find scientific data (or anything else I'd consider even remotely re…

Yeah it was so much easier for a homosexual in 1950s Nebraska I'm sure.

Re: Instagram can track anything you do on any website in their in-app browser

#335
post #311
post #164

Earlier quoted context omitted.

Tangential, but these same links have always been a great way to break out of poorly designed kiosk systems. I recall noodling with a huge interactive display on the side of a bus stop that had an embedded map, and surely enough the TOS link launched a browser, and from there you could use the Save As dialog to get to anything to execute

As a kid I loved doing this in every museum/library/other place that always had 'locked down' interactive Windows systems back in my youth. One of my favorite ones was in a museum where I was with a friend, and there was a PC. We were bored and wanted to play some flash game, but we only had access to a mouse, and clicking links inside the locked fullscreen browser. With enough clicks we got to google and managed to…

Although using the on-screen keyboard in accessibility settings would have been easier (if that existed back then), I like your creative young mind.

Re: Instagram can track anything you do on any website in their in-app browser

#336
post #196

Earlier quoted context omitted.

I have a browser based game I play that makes use of many userscripts and browser extensions to further improve/enhance the game. However mobile users suffer from a problem of not having such extras. There is a very nice app someone made on Android and iOS that uses in-app browsers in order to be able to add a lot of custom things. There are many useful instances for the in-app browsers and I don't think they should…

Mind if I ask what game? Kiwi on Android is a Chromium fork that re-enables extensions on mobile. Works well for userscripts/extensions, though often times those UIs don't scale well to mobile.

Yeah, sure! The game is called Torn. It is a text-based MUD style game. People use lots of tools/scripts when playing it to improve things. Some mobile exclusive users do actually make use of apps like Kiwi on their Android phones in order to install userscripts and extensions. However some people have Apple devices (probably regretably) and as such are limited to less powerful solutions. Luckily someone made Torn PDA [1,2] which helps bridge this gap and give you some powerful tools that you can even use on iOS. If Apple was less restrictive with their browser it may be possible to do more in the browser without needing to resort to these in-app "hacks".

[1]: https://apps.apple.com/us/app/torn-pda/id1510138514 [2]: https://play.google.com/store/apps/details?id=com.manuito.to...

Re: Instagram can track anything you do on any website in their in-app browser

#337

I've meant to write a blog post about this, but here goes: In-app browsers allow users to view inappropriate content, often against the wishes of sensitive individuals. People especially at risk for this include addicts and children. Nearly every app, even "safe apps" including children-rated apps, allow access to an in app browser. Even when iOs has locked down all access to Safari, a parent has removed access to al…

This seems like a non-issue. Where's the damage? I'm tired of people using children and a miniscule population of users w/ severe content sensitivities as excuses to justify features that are really just tools for asserting norms. The children are fine. We've been talking about how bad the internet is for children so long that those children grew up, led fufilling lives, had their own children, and now those children…

I have to agree here. "Think of the children" is an excuse as old as time.

Re: Instagram can track anything you do on any website in their in-app browser

#338

Earlier quoted context omitted.

I'm glad to see someone mention addicts. I feel as if internet addiction, and especially subsets of it such as porn addiction, aren't given enough weight by either the addiction treatment community or the technical community. Before someone accuses me of being a conservative religious zealot as tends to happen when anyone denounces porn, I'll say that I'm far from a puritan and am extremely liberal in my social views…

You claim to be extremely liberal in your social views but then in the next breath make the assumptions that difficulty forming relationships today is significantly greater than in the past and further that this fact is due to effects that are caused (ultimately) by viewing porn. Those are both very socially conservative viewpoints and I have yet to find scientific data (or anything else I'd consider even remotely re…

Where did I say that it's harder to form relationships today than it was in the past? I didn't. I said nothing of the sort nor did anything I say imply as much, if that was your takeaway then it exposes your implicit biases more than it does anything about myself.

Re: Instagram can track anything you do on any website in their in-app browser

#339

I'm surprised that so many people write "yeah, any in-app browser can do that - nothing to see here". Anyone can potentially steal your wallet, so we shouldn't point out when someone actually does? Especially when there's hard evidence in article?

Every app and or website steals your wallet and when you point this out to people in tech who code this shit they respond with "just following orders".

Installed system wide ad blockers ages ago and got on with my life.

Re: Instagram can track anything you do on any website in their in-app browser

#340

I've meant to write a blog post about this, but here goes: In-app browsers allow users to view inappropriate content, often against the wishes of sensitive individuals. People especially at risk for this include addicts and children. Nearly every app, even "safe apps" including children-rated apps, allow access to an in app browser. Even when iOs has locked down all access to Safari, a parent has removed access to al…

The in-app browsers could use a domain whitelist if parental controls are turned on.

The OS should apply a domain whitelist to apps, in coordination with the app developer and the device "owner". (Like uBlock Matrix)
Post reply on HN