As society cannot allow this impunity of powerful corporations, a nation-state sponsored Corporation in this case.
Why do members of our own society not know the negative effects of using this technology?
iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
201–210 of 613 posts
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#202I use Bitwarden on my iPhone and sometimes copy passwords to the clipboard for some reason. Does this mean any app could have snooped on it without me knowing before?
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#203Earlier quoted context omitted.
I'm probably going to get downvoted to hell for saying this (again) but this still doesn't solve the problem of whether Apple themselves are abusing your privacy. Also, the closed-source OS means it's impossible to see what things are doing under the hood, or modify the behavior of the OS itself to be more privacy friendly. For example, on Apple if you aren't happy with an app snooping on your IMU data, you're out of…
> this still doesn't solve the problem of whether Apple themselves are abusing your privacy Eventually you have to trust someone. This added transparency from Apple is commendable. I support open source for publicly funded software, but if it's privately owned and funded, you can choose to buy and use it or not. Private companies are not under any moral obligation to open source their code or methods. Some people are…
>Eventually you have to trust someone. This added transparency from Apple is commendable. I support open source for publicly funded software, but if it's privately owned and funded, you can choose to buy and use it or not. Private companies are not under any moral obligation to open source their code or methods.
Funny how you change your argument mid-paragraph. "It's okay! You have to trust somebody. Or maybe you don't. But anyway, it's a private company, so just don't buy it!"
Well the latter is not what GP was arguing in this thread is it? -.-
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#204Earlier quoted context omitted.
Of course. The point is there are legit reasons for this to happen.
Sure, and the counterpoint is that those legit reasons are not worth the breach of privacy. The average user is horrified when they learn this happens, and "just trusting the developer to not abuse your clipboard" isn't an acceptable security model.
I agree. It’s also why they changed the api.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#205Earlier quoted context omitted.
Developers could create a third party ROM with the privacy enhancements which users could install.
How is users having to trust third-party developers about privacy features in a ROM different to users having to trust Apple?
Anybody can have a look at the ROM to see if it makes sense whereas only Apple can realistically audit the iPhone.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#206It seems like a ton of apps are abusing this feature: https://www.youtube.com/watch?v=pRSWdtoUAjo I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: https://old.reddit.com/r/apple/comments/hejb9i/ios14_cat…
People love to hate on Apple but the fact is, they continue to release features to better showcase or restrict developers that abuse your privacy. The "walled garden" also ensures they apply a ton of checks to apps to better restrict abuses. Sometimes it's overly sensitive and bad things happen, but in general it's awesome that over time it becomes harder and harder to get away with apps blatantly spying on you.
The walled garden does no such thing.
Either iOS is secure or it's not. if it's secure there is no need for the walled garden. Let me run anything and trust its security.
If it's not secure then the walled garden is security theater because it's trivial for any app to hide its true intent.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#207Earlier quoted context omitted.
I hate how our options are "Choose apple and blindly trust them" or "Chose android an see in the open that your data is being abused"
You forgot option 3: use Lineage+microg and enjoy the most private and secure platform available on a smartphone today. But if you chose the first one then you can't, because apple won't let you choose the software that runs on the equipment you bought.
I used to use linageOS no gapps and I loved it but then my nexus 5x died and I got a pixel 2 and linageOS support stopped at the pixel 1. It seems to me that the age of custom roms is over. Android got good enough that the only reason for a custom rom was privacy and extended updates. Since the pixel 2 is still updated there is no reason other than privacy and I guess no one was willing to put in the work for just that.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#208Earlier quoted context omitted.
Updates are still pushed by the manufacturer. I have the Xiaomi Mi A2 Lite (with Android One) and only got Android 10 last week. Biggest advantage is that it's a pure Android with no bloatware from the manufacturer. Also you get a guarantee IIRC to have at least two versions upgrades for the phone (my Xiaomi came with Android 8, so 10 should be the last one), and most of all security updates.
Phones only getting 2 major software updates (which are released yearly, so 2 years) is a bit of a deal breaker for me. I understand older versions of Android are pretty well supported at least by apps in Google Play. Also what bothers me about Android devices: I got a Galaxy S8 to do development for work, and not all manufacturers are created equal in updates of course; IIRC I waited almost a full year after the Goo…
Why did you even need a physical phone? Emulator works fine for most development use cases.
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#209Using fiddler I briefly looked and didn't see tiktok sending my clipboard contents anywhere. Edit: However, tiktok is one of the chattiest apps I've looked at. They have a huge number of tracking/logging/collection endpoints constantly slurping data in the background. See my hosts list which aims to block this: https://github.com/llacb47/mischosts/blob/master/tiktok-host...
Genuine question, why don't companies proxy tracker data through a single host that the app also depends on to serve data? That way it wouldn't be possible for users to block individual hosts to prevent tracking. I guess it's not worth the effort though because laypeople won't care either way?
Most trackers are 3rd parties that require you to go through their hosts. Additionally, these trackers are usually picked out by business analysts / product managers on different teams - so marketing my have their own tracking solution, sales might have their own, and engineering might have their own. Tends to be faster/easier to plop javascript on a page than engineering your own tracking/analytics pipeline at early stage startups
Re: iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
#210Earlier quoted context omitted.
People love to hate on Apple but the fact is, they continue to release features to better showcase or restrict developers that abuse your privacy. The "walled garden" also ensures they apply a ton of checks to apps to better restrict abuses. Sometimes it's overly sensitive and bad things happen, but in general it's awesome that over time it becomes harder and harder to get away with apps blatantly spying on you.
The walled garden does no such thing. Either iOS is secure or it's not. if it's secure there is no need for the walled garden. Let me run anything and trust its security. If it's not secure then the walled garden is security theater because it's trivial for any app to hide its true intent.
> Either iOS is secure or it's not
This is flat out wrong. Security isn't binary.