HomeTechnologyNot just Meta: TikTok's...

Not just Meta: TikTok’s built-in browser on iOS is capable of logging keyboard actions, the report says.

They find JavaScript code to capture text in TikTok’s built-in browser for iOS | Font: spill

adUnits.push({
code: ‘Rpp_tecnologia_apps_Nota_Interna1’,
mediaTypes: {
banner: {
sizes: (navigator.userAgent.match(/iPhone|android|iPod/i)) ? [[300, 250], [320, 460], [320, 480], [320, 50], [300, 100], [320, 100]] : [[300, 250], [320, 460], [320, 480], [320, 50], [300, 100], [320, 100], [635, 90]]
}
},
bids: [{
bidder: ‘appnexus’,
params: {
placementId: ‘14149971’
}
},{
bidder: ‘rubicon’,
params: {
accountId: ‘19264’,
siteId: ‘314342’,
zoneId: ‘1604128’
}
},{
bidder: ‘amx’,
params: {
tagId: ‘MTUybWVkaWEuY29t’
}
},{
bidder: ‘oftmedia’,
params: {
placementId: navigator.userAgent.match(/iPhone|android|iPod/i) ? ‘22617692’: ‘22617693’
}
}]
});

TikTok continues to gain ground online and many of the tools implemented by its parent company Bytedance, strive to keep the user on the platform for as long as possible by watching videos and consulting links. However, this last point can be problematic for the brand, as a cybersecurity researcher found that a popular app’s internal browser is capable of capturing “keyboard inputs and outputs,” as Instagram and Facebook do.

Felix Krause has detailed this new iOS find on his website. The researcher points out that tik taklike Meta with built-in browsers, it injects JavaScript code into third-party websites that act as keyloggers, systems that record keystrokes.

“From a technical point of view, this is tantamount to installing a keylogger on third-party websites.” Krause mentions, although he also elaborates, that “Just because an app injects JavaScript into external websites doesn’t mean it’s doing something malicious.”

TikTok and its built-in browser

Felix Krause, founder fast laneused seven applications in iPhone that use embedded browsers. In this study of iOS apps using InAppBrowser.com, it was found that tik tak it was the only one that ran codes to track keystrokes, in addition to determining which words the user highlights on each page.

Using InAppBrowser, Krause discovered JS
Using InAppBrowser, Krause discovered JS | Font: Felix Kraus

“When you open any link in the TikTok iOS app, it opens in your browser within the app. When you interact with a website, TikTok subscribes to all keyboard input (including passwords, credit card information, etc.) and every screen touch, such as the buttons and links you click. mentions Krause.

TikTok denies allegations

Maureen Shanahan, Global Communications Director at tik tak, denied Krause’s allegations. In a statement to Forbes, the chief executive notes that, “As with other platforms, we use a browser in the application to provide an optimal user experience, but the Javascript code in question is only used for debugging, troubleshooting, and performance monitoring of that interaction, such as checking page load speed. page or if it crashes.

This code, according to the rep, is part of a development kit (SDK), which includes tools that tik tak currently not using. However, the publication emphasizes that tik tak You can’t tell which SDK vendor they use and what tools are included in the SDK.

At the moment, tik tak He is experiencing a new issue with the US government over allegations of addressing citizens’ personal data in China and accessing ByteDance engineers to that information. An FCC official asked Apple and Google to remove the app from their markets.

Source: RPP

- A word from our sponsors -

Most Popular

LEAVE A REPLY

Please enter your comment!
Please enter your name here

More from Author

- A word from our sponsors -

Read Now

Putin was announced the sale of “Easter price”

Easter truce at the front in Ukraine will not be continued. .in_text_content_22 {width: 300px; Height: 600px; } @Media (min-width: 600px) {.in_text_content_22 {width: 580px; Height: 400px; }} .Adsbygoogle {Touch-Action: Manipulation; } The Russian dictator Vladimir Putin did not order to continue the...

Archie from the Russian Federation wears a “printer”

The invaders use the silence regime to clean the river. .in_text_content_22 {width: 300px; Height: 600px; } @Media (min-width: 600px) {.in_text_content_22 {width: 580px; Height: 400px; }} .Adsbygoogle {Touch-Action: Manipulation; } The Russian army organizes heavy equipment routes, hiding and using the so...

Trump plans Socat of Gospep and close a number of US embassies – Nyt

The United States can reorganize the State Department - the appropriate project Decree has already been developed by the US presidential administration Donald Trump. .in_text_content_22 {width: 300px; Height: 600px; } @Media (min-width: 600px) {.in_text_content_22 {width: 580px; Height: 400px; }} .Adsbygoogle {Touch-Action: Manipulation; } ...