111–120 of 158 posts
Earlier quoted context omitted.
> a loud minority completely unironically still use desktop & laptop computers for activities besides work. Is using a desktop or laptop for non-work activities ironic somehow?
I honestly don’t know what exactly irony means. unironically = sincerely/earnestly
They used to check your clipboard the whole time too. They use the local network as one of their sensors to identify you (fingerprinting). However they have plenty more (see their privacy policy).
But why? It's an app... I guess this can allow them to link other people in your household to you, but isn't the wifi network name already available?
Earlier quoted context omitted.
The cool thing about phones is that you can MITM yourself and see what apps are sending, assuming they don't certificate pin (which TikTok doesn't). The person that reported this during the beta period didn't find any evidence when doing so. https://old.reddit.com/r/videos/comments/fxgi06/not_new_news...
Can you actually still widely do this? Last time I checked on the latest versions of Android apps don't accept user certificates so you can't really do much about any https traffic, which really is the bulk.
see: Frida, xposed framework (not sure if still relevant)
They used to check your clipboard the whole time too. They use the local network as one of their sensors to identify you (fingerprinting). However they have plenty more (see their privacy policy).
> They used to check your clipboard the whole time too. To be fair quite a lot of apps did this to enable deep links/automatically opening certain clipboard links. Every big app has changed this to no longer show the 'pasted from' notification. And it was never shown that they export those clipboard contents to homebase.
— Jeremy Burge (@jeremyburge) June 24, 2020
TikTok wasn’t checking it for link opening …
Just to add: Scanning networks to gather data seems pretty popular these days - smart tvs have done so, and even the ebay site used to portscan visitors [1]. [edit] And of course, there's WebRTC leaking your local IP - which ublock origin can specifically block [2]. [1] https://www.bleepingcomputer.com/news/security/ebay-port-sca... [2] https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-l...
You’ll need a router/firewall and an AP that are both VLAN-aware. I personally use an EAP225 and some eBay industrial PC running freebsd.
Just to add: Scanning networks to gather data seems pretty popular these days - smart tvs have done so, and even the ebay site used to portscan visitors [1]. [edit] And of course, there's WebRTC leaking your local IP - which ublock origin can specifically block [2]. [1] https://www.bleepingcomputer.com/news/security/ebay-port-sca... [2] https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-l...
Some other apps (Signal?) have also done this out of the blue, though they may have since added a UI around this. Regardless, Apple has done the right thing by putting this behind a permissions box, but the developer should be required to have some sort of explanation string of why they need this.
I assume signal is udp hole punching to get around NAT.
You scan a QR code with one device and it transfers the entire account state to the new phone.
Earlier quoted context omitted.
Is this separate from mDNS [1]? A lot of smart TVs and PCs increasingly use mDNS to support some fairly handy consumer features, like AirDrop, being able to setup your TV with your phone, network printing/scanning, ChromeCast, whole-home control of lights & other IoT devices, etc. [1] https://en.wikipedia.org/wiki/Multicast_DNS
The incident I'm referring to was about LG [1]. The report includes network captures, so I'd trust it. Apparently, some chinese smart TV brands have been doing similar things, but I wouldn't be surprised if most other vendors have caught up and used stealthier techniques. [edit] Here's the news about those chinese TVs [2] and the original report [3] [1] https://arstechnica.com/information-technology/2013/11/lg-sm...…