iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
1–10 of 613 posts
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#2I use bitwarden as my password manager. Out of paranoia, I have been logging into Bitwarden only while an empty tab is open in case some random website is able to access my keystrokes while I use the plugin.
I am a web developer, but I wasn't actually able to find information about whether this is a real risk or not last year when I began doing it. Can anybody clarify?
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#3Hopefully we can turn this off, this is going to destroy usability be very annoying.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#4Why does any app have access to the clipboard? Seems like a big security hole.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#5Chinese Communist Party [1]
[1] https://www.vox.com/open-sourced/2019/12/16/21013048/tiktok-...
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#6Hopefully we can turn this off, this is going to destroy usability be very annoying.
You mean so you can snoop from the user without being detected?
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#7hm... seems that privacy issue:
https://developer.apple.com/app-store/review/guidelines/#pri...
can led to ban from AppStore
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#8I use bitwarden as my password manager. Out of paranoia, I have been logging into Bitwarden only while an empty tab is open in case some random website is able to access my keystrokes while I use the plugin. I am a web developer, but I wasn't actually able to find information about whether this is a real risk or not last year when I began doing it. Can anybody clarify?
The problem is that iOS doesn't differentiate between a call that merely checks for the presence of a clipboard entry (e.g. so you can enable "Paste" in a menu/submenu) and actually copying the contents of the clipboard.
The workaround (for legitimate apps) is to simply always keep that "Paste" option enabled--even if the clipboard is empty. That way you won't freak out your users and only suffer the most minor of usability consequences.
Having said that I don't think TikTok has any relevant functionality such as enabling a "Paste" option so... Most likely nefarious!
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#9Fairly impressive if true - they must have already gobbled up tens of millions of passwords and other sensitive data that users had no idea was being stolen from their clipboard.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#10Let's be real. Is anyone honestly surprised?