You know how some popular apps don't let you out of the app when you click on ??? ?? ?? ???a link, opening said link in their own little in-app browser instead?
As it turns out, this enables these apps to monitor what you do. And among the most popular apps that do this, TikTok appears to be the worst offender.
In a blog post Thursday, security researcher Felix Krause announced the launch of InAppBrowser, a tool that lists all the JavaScript commands executed by an iOS app as its in-app browser renders a webpage.
To show what the tool can do, Krause analyzed some popular iOS apps that have an in-app browser, and the results are disturbing. Krause's data shows that apps including TikTok, Instagram, Facebook Messenger, and Facebook, all modify webpages that are opened in the in-app browser. "This includes adding tracking code (like inputs, text selections, taps, etc.), injecting external JavaScript files, as well as creating new HTML elements," Krause says. They also fetch website metadata, though Krause says this is "harmless."
SEE ALSO: TikTok is a growing source of news among UK adultsWhen Krause dug a little deeper into what these apps' in-app browsers really do, he'd found that TikTok does some bad things, including monitoring all of users' keyboard inputs and taps. So, if you open a web page inside of TikTok's app, and enter your credit card details there, TikTok can access all of those details. TikTok is also the only app, out of all the apps Krause has looked into, that doesn't even offer an option to open the link in the device's default browser, forcing you to go through its own in-app browser.
UPDATE: Aug. 23, 2022, 9:59 a.m. EDT In a chat with Motherboard, Krause explained that his report "doesn’t say TikTok is actually recording and using this data." TikTok told the outlet that his findings are "incorrect and misleading.""We do not collect keystroke or text inputs through this code, which is solely used for debugging, troubleshooting, and performance monitoring,” a TikTok spokesperson said.
Check out Motherboard's article.
In a statement to Forbes, a TikTok spokesperson confirmed the practice, but says that "the Javascript code in question is used only for debugging, troubleshooting, and performance monitoring of that experience."
It's all needed to provide "an optimal user experience," she said.
Other apps Krause has looked at, like Instagram, also do some monitoring of their own, though none of them go as far as TikTok. And Snapchat and Robinhood are good examples, as they don't modify webpages or fetch their metadata of the sites you open in their in-app browsers.
Krause warns that apps actually have a way of hiding their JavaScript activity from his InAppBrowser tool, meaning they could be doing more monitoring behind the scenes. For now, the only way to make sure they can't do any monitoring is to open websites in the device's default browser — if the app even offers this option.
Topics TikTok
Threads is getting its own fact
Blockchain Startup YAY Network Rebrands
Support Mounts for Lone API Candidate in 52nd District
Nisei Soldiers Stamp to Be Retired Soon
ESL представила аналог DPC — у DreamLeague появится второй дивизион
Stem Cell Donor Sought for Musician Kina Grannis’ Mother
Feinstein’s Role in JA Redress
Grateful Crane Presents ‘Songs for a Sansei’
Teens are racking up followers on Instagram accounts that only post polls
Telept City Launches Cutting
'True Detective' Season 4, episode 1: Burning questions explored
Awakening a Field of Dreams: Friends of Manzanar Gift Moves Goal of Re
'Manzanar, Diverted' to Be Shown at UCLA
Haunted Little Tokyo Returns This Weekend
How to watch VT vs. Tulane football livestreams: kickoff time, streaming deals, and more
Manzanar Committee Mourns Passing of Former Inyo County Supervisor Bob Gracey ?
"Japan is on the Forefront of Embracing a Web3 Future"
‘Ben Yokoyama and the Cookie of Doom’ Has Upbeat Message
Will the Milky Way and Andromeda crash? Now scientists aren't so sure.
HLTV.org live from Moscow
USC Theatre Grad Lands Stage Manager Position for ‘Defenders’L.A. Nebuta at LACMA‘Bokyo no Kane’ to Be Screened in TorranceThree Screenings of Miyazaki’s ‘Princess Mononoke’New Attractions Add Flavor to Maryknoll MochitsukiAsian World Film Festival Includes Features from JapanThriller ‘Earthquake Bird’ at Laemmle’s Music HallBokashi Composting Workshop at JACCCReps. Lieu, Barragan Urge Release, Home Confinement of Federal Prisoners in COVID‘Dawn of a New Day’ at JANM Baidu opens Ernie Bot to public after regulatory approval · TechNode Taking Back Power AI's toll on humanity, the environment remains dangerously unclear, government agency warns Nio CEO says EV firm’s forthcoming phone is comparable with Android flagship devices · TechNode The “Free Speech” Cheat Wordle today: The answer and hints for April 26, 2025 Chinese automaker Neta completes crossover funding round of RMB 7 billion · TechNode ByteDance’s OceanEngine introduces free AI script Clippers vs. Nuggets 2025 livestream: Watch NBA playoffs for free Pokémon Nintendo Switch game sale: Save up to 33%
0.1481s , 9950.953125 kb
Copyright © 2025 Powered by 【??? ?? ?? ???】Enter to watch online.TikTok's in,
