Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

See what JavaScript commands get injected through an in-app browser

krausefx.com

Post reply on HN
Print view View original

61–70 of 330 posts

Re: See what JavaScript commands get injected through an in-app browser

#61

Post by AlexandrB »

didericis wrote: post #38
walls wrote: post #34

Earlier quoted context omitted.

What happened to free speech being the bastion of America and the only thing that can counter misinformation and propaganda? Suddenly doesn't seem to work so well when a Chinese app is granted that privilege.

Stealing information without user permission is not free speech.

Tell that to Facebook and LinkedIn. I don't get the double standard. These practices should be illegal, full stop. Why is it ok for US companies to do the same kinds of things?

Re: See what JavaScript commands get injected through an in-app browser

#62

Post by [deleted] »

baby wrote: post #12
sva_ wrote: post #9

I just don't understand how we can allow a Chinese social media app in the west, while any non-chinese social media apps aren't allowed there? Same with housing, why can Chinese nationals buy housing here, while I can't do so there?

We’re not a dictatorship?

[deleted]

Re: See what JavaScript commands get injected through an in-app browser

#63

Post by ta8645 »

baby wrote: post #12
sva_ wrote: post #9

I just don't understand how we can allow a Chinese social media app in the west, while any non-chinese social media apps aren't allowed there? Same with housing, why can Chinese nationals buy housing here, while I can't do so there?

We’re not a dictatorship?

No post body was provided.

Re: See what JavaScript commands get injected through an in-app browser

#64

Post by rvz »

zx8080 wrote: post #3

Is it similar to what Meta in Instagram does? [0] - a week ago thread. [0]: https://news.ycombinator.com/item?id=32415470

TikTok is no different and is beyond worse than Meta at this point. Whatever Meta is doing doesn't excuse the reasons for this tracking.

Given that Facebook was fined in the billions for this abuse in the past, TikTok should also be fined for this with in the billions of dollars.

We have learned nothing around this and have repeated the same problems in social networks a decade later.

Re: See what JavaScript commands get injected through an in-app browser

#65

Post by kungfufrog »

So let me get this straight:

If I click a link inside the Instagram app, that for whatever reason takes me to gmail or microsoft or wherever that requires authentication, and I decide to login on that page so I can view the link in question, Meta and TikTok are able to capture my credentials and ingest the data back in to their metrics and analytics pipelines?

Is that even f*cking legal?

Re: See what JavaScript commands get injected through an in-app browser

#66

Post by berjin »

Is there anything website owners can do about this? I've been many web games, including my own, embedded and surrounded by adverts (see dordle,io, wordle-unlimited,io). Simple permissions like x-frame-options won't work since they're proxying everything onto the same origin. I've thought about checking after a few minutes if the user is on an embeded DOM then asking them to head over to the real site.

Re: See what JavaScript commands get injected through an in-app browser

#67

Post by AlexandrB »

londons_explore wrote: post #2

Was anyone expecting otherwise? They'll use it to make their algorithm better, and they'll use it to better target ads. Both of those things are good for me the user, so I'm fine with it. And for those who don't like that, use a blocker, or don't use TikTok.

That's great if it's something you want. What happened to getting consent? All of these "features" should be opt-in.

Re: See what JavaScript commands get injected through an in-app browser

#68

Post by upupandup »

And on top of this we are seeing scary trends emerge on TikTok: they are able to mobilize youth into anti-social activities like stealing cars or creating weapons. All they have is a small notice at top of the videos with a disclaimer.

ex) Kiaboyz wreaking havoc in Columbus as videos of stealing Kia/Hyundai cars went viral on TikTok

Suffice to say that the bar isn't very high in America. This type of video would never catch on in places like Japan or Switzerland.

Re: See what JavaScript commands get injected through an in-app browser

#69

Post by _carbyau_ »

sva_ wrote: post #9

I just don't understand how we can allow a Chinese social media app in the west, while any non-chinese social media apps aren't allowed there? Same with housing, why can Chinese nationals buy housing here, while I can't do so there?

Does it bother the west's rich and/or powerful? If not, it doesn't matter in the West apparently.

China and the West are both controlled by factors not really in line with helping the stereotypical Common Person.

Post reply on HN