Live data from Hacker News

See what JavaScript commands get injected through an in-app browser

krausefx.com

141–150 of 330 posts

Re: See what JavaScript commands get injected through an in-app browser

#141
post #12
post #9

I just don't understand how we can allow a Chinese social media app in the west, while any non-chinese social media apps aren't allowed there? Same with housing, why can Chinese nationals buy housing here, while I can't do so there?

We’re not a dictatorship?

This nutjob honeypot tastes delicious.

Re: See what JavaScript commands get injected through an in-app browser

#143
post #111
post #9

I just don't understand how we can allow a Chinese social media app in the west, while any non-chinese social media apps aren't allowed there? Same with housing, why can Chinese nationals buy housing here, while I can't do so there?

Honestly, this type of discussion is seriously irritating, because it implies that TikTok is doing something unique that other apps aren't doing. Just as the article demonstrates, many western countries do the exact same thing that TikTok does, except TikTok seemingly takes it one step further (probably because of shoddy programming). Applying geographic-based arguments to technology is just a bandaid. The problem ne…

TikTok is brought up because it has an insane amount of influence on the culture and identity of a huge swath of people. Do you seriously believe that China, or any country, would not want to leverage such influence to persuade or alter the culture or a potential advisory?

We all shit our pants because Russia used Meta, and American company, to influence the 2020 election. Imagine the same amount of data, a more accurate algorithm, and entirely within the control of foreign actors.

It doesn't matter if it is China or Colombia or Japan, a foreign company have that much influence over the opinions citizens of a country is dangerous.

Re: See what JavaScript commands get injected through an in-app browser

#144
post #93

Earlier quoted context omitted.

>> Does just not entering any keyboard input in the in app browser mitigate this? yes but i doubt the hundreds of millions of users, many of which are children, know this

To play devil's advocate... the most common way to end up in the in-app browser is to click an ad. Non-technical people don't have a concept of "in app browser sandboxing". In their minds they clicked on an ad, they're still inside TikTok, TikTok's UI is showing, TikTok will show prompts based on the content shown... they probably assume TikTok has access to that page? Honestly I'm more annoyed that Apple allows big…

How do you know that's the most common way?

Because I doubt it is. People click links in chats and in their feeds way more than they click ads

Re: See what JavaScript commands get injected through an in-app browser

#145

Earlier quoted context omitted.

Tell that to Facebook and LinkedIn. I don't get the double standard. These practices should be illegal, full stop. Why is it ok for US companies to do the same kinds of things?

It is not a double standard. There are already legal and cultural limitations in the US that have much more respect for user consent, user privacy and intellectual property than in China. Any US company caught putting arbitrary keyloggers in products can and should be condemned. Companies still track large amounts of data and pull shady antics, but the big difference is there is a means of holding US companies to acc…

> the big difference is there is a means of holding US companies to account if they violate privacy standards

Have yet to see this in practice. What usually happens is a bunch of articles are written "condemning" their actions, they are fined some ridiculously small amount and then business continues as usual.

The most recent action that seems to have had a significant impact on how Facebook captures data is Apple's "Ask App Not to Track". This is not exactly a shining example of the how the US system protects users privacy as the action was taken by a company, not a regulator.

Re: See what JavaScript commands get injected through an in-app browser

#146
post #113

Earlier quoted context omitted.

Everything is legal until it is explicitly made illegal. And I can assure you no US politician can understand more than 3 words in that paragraph you wrote, let alone make laws to regulate it.

Eavesdropping on electronic conversations where both parties have a reasonable expectation of privacy is illegal in many jurisdictions already.

The thing is, in this situation you _don't_ have any resonable expectation of privacy, regardless of what the masses think is actually happening.

Re: See what JavaScript commands get injected through an in-app browser

#148
post #118
post #94

Earlier quoted context omitted.

They do a lot more than that. > TikTok iOS subscribes to every tap on any button, link, image or other component on websites rendered inside the TikTok app. > TikTok iOS uses a JavaScript function to get details about the element the user clicked on, like an image (document.elementFromPoint) And that's just a sample of the calls the author was able to find.

If I build an analytics company and build a product that my customers can use to "analyze" their users activity it'd almost be a total neglect on my end not to include common tracking mechanisms that are well documented like simple event hooks in js. I really don't get the rage against tiktok. What they do that is publicly known is not bad. Maybe there is something bad they're doing but these random HN top stories ar…

If you sold a phone that sent call details back to the manufacturer you’d likely get locked up.

Tik tok are not a party to these communications, and they’re not a carrier or service provider. What they’re doing is wire tapping.

Re: See what JavaScript commands get injected through an in-app browser

#150

Earlier quoted context omitted.

The wisdom of reciprocity also is older than all governments today. See Golden rule and Silver rule.

There were governments when those rules were formulated. Unless you mean, "Older than all governments in existence today," which might be true.

Reciprocity predates humanity by many millions of years: https://en.wikipedia.org/wiki/Reciprocal_altruism
Post reply on HN