HomeTechnologyNot just Meta: TikTok's...

Not just Meta: TikTok’s built-in browser on iOS is capable of logging keyboard actions, the report says.

They find JavaScript code to capture text in TikTok’s built-in browser for iOS | Font: spill

adUnits.push({
code: ‘Rpp_tecnologia_apps_Nota_Interna1’,
mediaTypes: {
banner: {
sizes: (navigator.userAgent.match(/iPhone|android|iPod/i)) ? [[300, 250], [320, 460], [320, 480], [320, 50], [300, 100], [320, 100]] : [[300, 250], [320, 460], [320, 480], [320, 50], [300, 100], [320, 100], [635, 90]]
}
},
bids: [{
bidder: ‘appnexus’,
params: {
placementId: ‘14149971’
}
},{
bidder: ‘rubicon’,
params: {
accountId: ‘19264’,
siteId: ‘314342’,
zoneId: ‘1604128’
}
},{
bidder: ‘amx’,
params: {
tagId: ‘MTUybWVkaWEuY29t’
}
},{
bidder: ‘oftmedia’,
params: {
placementId: navigator.userAgent.match(/iPhone|android|iPod/i) ? ‘22617692’: ‘22617693’
}
}]
});

TikTok continues to gain ground online and many of the tools implemented by its parent company Bytedance, strive to keep the user on the platform for as long as possible by watching videos and consulting links. However, this last point can be problematic for the brand, as a cybersecurity researcher found that a popular app’s internal browser is capable of capturing “keyboard inputs and outputs,” as Instagram and Facebook do.

Felix Krause has detailed this new iOS find on his website. The researcher points out that tik taklike Meta with built-in browsers, it injects JavaScript code into third-party websites that act as keyloggers, systems that record keystrokes.

“From a technical point of view, this is tantamount to installing a keylogger on third-party websites.” Krause mentions, although he also elaborates, that “Just because an app injects JavaScript into external websites doesn’t mean it’s doing something malicious.”

TikTok and its built-in browser

Felix Krause, founder fast laneused seven applications in iPhone that use embedded browsers. In this study of iOS apps using InAppBrowser.com, it was found that tik tak it was the only one that ran codes to track keystrokes, in addition to determining which words the user highlights on each page.

Using InAppBrowser, Krause discovered JS
Using InAppBrowser, Krause discovered JS | Font: Felix Kraus

“When you open any link in the TikTok iOS app, it opens in your browser within the app. When you interact with a website, TikTok subscribes to all keyboard input (including passwords, credit card information, etc.) and every screen touch, such as the buttons and links you click. mentions Krause.

TikTok denies allegations

Maureen Shanahan, Global Communications Director at tik tak, denied Krause’s allegations. In a statement to Forbes, the chief executive notes that, “As with other platforms, we use a browser in the application to provide an optimal user experience, but the Javascript code in question is only used for debugging, troubleshooting, and performance monitoring of that interaction, such as checking page load speed. page or if it crashes.

This code, according to the rep, is part of a development kit (SDK), which includes tools that tik tak currently not using. However, the publication emphasizes that tik tak You can’t tell which SDK vendor they use and what tools are included in the SDK.

At the moment, tik tak He is experiencing a new issue with the US government over allegations of addressing citizens’ personal data in China and accessing ByteDance engineers to that information. An FCC official asked Apple and Google to remove the app from their markets.

Source: RPP

- A word from our sponsors -

Most Popular

LEAVE A REPLY

Please enter your comment!
Please enter your name here

More from Author

- A word from our sponsors -

Read Now

Trump is a cumulative from Ukraine just like in negotiations with the Russian Federation – Zelensky Outvtil

US President Donald Trump urged Ukraine to immediately agree with Russia's proposal about direct negotiations in Turkey. .in_text_content_22 {width: 300px; Height: 600px; } @Media (min-width: 600px) {.in_text_content_22 {width: 580px; Height: 400px; }} .Adsbygoogle {Touch-Action: Manipulation; } The leader of America noted...

The port in Indonesia has become the Russian oil shadow trade center

Russia organized a shadow oil center in the port of Indonesia. .in_text_content_22 {width: 300px; Height: 600px; } @Media (min-width: 600px) {.in_text_content_22 {width: 580px; Height: 400px; }} .Adsbygoogle {Touch-Action: Manipulation; } The aggressor country is looking for results on how to get...

Borders won the position of the Russian BPL management (video)

Ukrainian border guards made new victims in the direction of Sumy. .in_text_content_22 {width: 300px; Height: 600px; } @Media (min-width: 600px) {.in_text_content_22 {width: 580px; Height: 400px; }} .Adsbygoogle {Touch-Action: Manipulation; } Professionally, the mouths of the shock of unmanned aviation complexes (Rubpak)...

The abode attacked the village of Cub in the Harkov region – the esophagus and the post -radiation

The army of the Russian Federation struck new blows in the civil settlements of the Kharkiv region. .in_text_content_22 {width: 300px; Height: 600px; } @Media (min-width: 600px) {.in_text_content_22 {width: 580px; Height: 400px; }} .Adsbygoogle {Touch-Action: Manipulation; } On Sunday afternoon, May 11,...