To follow us, we invite you to download our Android and iOS application. It is clear that this situation cannot continue. The firm could allow the use of an internal browser as long as the application sends internal links to its service ( in the case of TikTok for example), but require the use of the Safari view for external links.Īpple positions itself as a champion of privacy. It would therefore require new regulations from Apple around internal browsers to correct these privacy problems. In particular, they can hijack the use of an API named WKContentWorld to no longer detect the JavaScript commands integrated into their applications.
#TIKTOK PASSWORDS UPDATE#
Apple must reactĪs Felix Krause points out, app developers who have a problem with privacy can easily update their apps to hide these discoveries. This is possible on Instagram, Facebook Messenger, Facebook, Amazon and Snapchat in particular. Those who care about the security of their data are therefore advised to deactivate the application’s internal browser. Other applications that are challenged by Felix Krause’s tool allow the user to choose between the default iOS browser and the application’s internal browser. In the list we can mention Twitter, WhatsApp, Reddit, YouTube, Gmail, Twitch, Spotify, Microsoft Outlook, Teams and OneNote, Telegram, Slack and Signal.
These applications are therefore out of the question, they cannot integrate JavaScript codes into Safari. Others choose to use an integrated version of the Safari browser called through the API SFSafariViewController. To pose a problem for user privacy, apps use their own internal browser. If they are used only for troubleshooting or if the data is collected for processing. Moreover, we cannot know how the applications use the data collected. This means that some elements tracked by companies like Facebook and TikTok are not detected.
#TIKTOK PASSWORDS CODE#
It does not make it possible to detect everything and in particular not the native code used by these services for certain follow-ups. Like other platforms, we use an in-app browser to provide an optimal user experience, but the JavaScript code in question is only used for debugging, troubleshooting and performance monitoring of this experience, for example to check the page loading speed or the absence of failure.įelix Krause specifies that his tool is not perfect. The firm recognizes the integration of these functions, but promises not to use them. The social network has already responded to Forbes on the subject. It can thus read everything you type on the keyboard, which includes your passwords, and all ” tapsi.e. We thus discover that the TikTok application injects code which makes it possible to follow absolutely all your actions in its browser. Just share the link to the site on a social network like TikTok or Instagram, to open it with the relevant application. This is a website to open with your favorite app’s built-in browser to test what it injects into JavaScript commands. A developer reveals the extent of the problemįelix Krause, developer emeritus passed by Google and Twitter took the matter in hand to develop InAppBrowser.
0 kommentar(er)
