Live data from Hacker News

See what JavaScript commands get injected through an in-app browser

krausefx.com

101–110 of 330 posts

Re: See what JavaScript commands get injected through an in-app browser

#102
post #25
post #21

Earlier quoted context omitted.

People are going to reply to you with the usual "we are better than them", "we are a democracy" etc., but reciprocity clauses are very common in areas like international trade, travel, disarmament treaties, emissions control and lots more. In fact China would never have been allowed into the WTO (which happened in 2001) had they not made sweeping changes to their economy and assured the world that they would compete…

> reciprocity clauses are very common in areas like [...] Distributing software for you to run on your own hardware is speech, though, and it's protected by the first amendment. You can license the distribution of your own software if you want, but you can't tell me I can't give you software if you want it. Basically: how do you think this would work, in a way that wouldn't also make Linux or gcc or whatever availabl…

The first amendment applies to US law and the rights of US residents, not to foreign multinationals. The USA can and does restrict the speech of non-Americans in America, such as with respect to political campaign funding.

Plus, criminal speech can be restricted in any case. If it's determined that the TikTok app is violating the law or facilitating the commission of criminal activity, the distribution of that app could itself be deemed a crime, or even worse for app stores, subject them to civil liability.

Re: See what JavaScript commands get injected through an in-app browser

#103

Why on earth is this even allowed in IOS in the first place ? Why do apps have the ability to control and change the browser? Instead of using the default one? Like android.

These same tools are what allow you to build and ship fully JS based apps on iOS instead of having to use Swift or Objective-C or anything like that. Arbitrary web views can be an entire app. Or they can reinvent the wheel and become in-app browsers. A lot of apps are fully or partially web based. Even Apple’s own apps use web views in crazy ways. For example, the entire Mac App Store used to be a web view. Parts of macOS system preferences are web views. It’s just that because they’re web views, if you slap browser-like chrome on them and send them to the internet, they also work as web browsers.

Re: See what JavaScript commands get injected through an in-app browser

#104

Earlier quoted context omitted.

Sounds like the opposite of housing from a national security POV. If a Chinese national buys a house in the US, then the US has 'control' over their property. The US would want Chinese nationals to buy houses in the US.

In some countries housing supply is limited and the housing market can be messed with by influx of foreign ownership. Possibly less of an issue with US due to size of the country. Still, I think if someone can buy land here, we should be able to buy land there (within reason)?

If the news is to be believed, housing supply is limited in the US.

US Housing is generally a safe investment for foreign investors. Since US vestigial racist policies make it difficult to create dense, affordable housing, single family homes are in high demand and relatively limited supply.

Re: See what JavaScript commands get injected through an in-app browser

#105

I can’t quite figure this out: it sounds like if you click a link in someone’s TikTok content, the in app browser can read any text entered on that site using the in app browser. Does just not entering any keyboard input in the in app browser mitigate this? Does Apple Lockdown help in this situation? I thought that typical TikTok use just involved scrolling and watching video content. Are users who only view content…

Apple exposes two ways to use an in app browser. One is a legacy method that gives you full control, the other gives the user a sandboxed browser with no interference from the app.

TikTok isn't the only app abusing this. Instagram and Facebook will both do sneaky things like respond to the content of the page you're browsing (asking to save passwords in their own private keychain, showing context specific information, etc.)

-

You're not exposed to any of these if you don't open a link inside the in-app browser.

The most common reason to click a link in their in-app browser is an ad... so obviously TikTok, Instagram and Facebook are using the in-app browser to track your interactions after the ad click and sell the data

Re: See what JavaScript commands get injected through an in-app browser

#106
post #98

Earlier quoted context omitted.

> Chinese companies are not banned in the US Huawei/China Telecom/etc. notwithstanding, though they are not exactly social media competitors vs. Google/Meta.

Chinese companies are not categorically banned. Huawei had to do more than be Chinese.

I think you can still buy an iPhone in China, but the only Apple services that appear to be available are the App Store (some apps such as VPN apps and news apps are obviously unavailable) and Apple Music.

Re: See what JavaScript commands get injected through an in-app browser

#108
Apple and Google have guidelines about what apps are/aren't allowed to if they want to be on their app store.

"Protecting the user" is supposed to be one reasons they take a 30% cut of all in app purchases. Apple even uses this as an excuse to not allow side loading apps.

How are they not blocking this?

Re: See what JavaScript commands get injected through an in-app browser

#110
post #9

I just don't understand how we can allow a Chinese social media app in the west, while any non-chinese social media apps aren't allowed there? Same with housing, why can Chinese nationals buy housing here, while I can't do so there?

> why can [XXX] nationals buy housing here, while I can't do so there? Simply because when XXX nationals come with all cash offers and willing to pay above market & waive all contingencies, sellers are willing to sell. It just so happens that certain nationals are more prone to having that sort of money than others.

No, it isn't about people being more prone to buy property in one place, rather than another. Let x be a any number in [0, infty), I literally can not buy property in China for any x.
Post reply on HN