TikTok’s privacy issues really come out every once in a while. Last week, a research report pointed out that if you use TikTok’s built-in browser to surf the Internet, it is likely to monitor (or skim) what you type on the keyboard, including account passwords, credit card information, and links you have clicked on. Although such a large company will not steal, it is still recommended to avoid using it as much as possible.
Image source: Unsplash
Research points out that TikTok’s built-in browser monitors all the information you enter on the keyboard, including credit cards
Last week, Krausefx.com released an iOS privacy report, mentioning that using in-app browsers will cause potential privacy risks, and that many well-known apps have problems, such as Instagram, Facebook, TikTok, etc., which will put JavaScript code into third-party websites.
Not only that, when a user opens any link in the TikTok app, it will be activated directly in the app. At this time, TikTok will monitor all the user’s keyboard input, including passwords, credit card information, and every click on the screen, such as buttons and links. For this reason, TiTok officials have also confirmed that the App code does have this function, but they have not used it. TikTok said:
“Just like other platforms, our App has built-in browser functionality to provide users with the best experience, and the JavaScript code in question is only used for testing, troubleshooting, and performance monitoring, such as checking the page loading speed and whether it crashes.”
This also means that TikTok can indeed “monitor and record” keyboard input.
Image source: Unsplash
Although the official stated that it will not be used, it is related to your account password, credit card and other private information, so it is still recommended not to use it. Moreover, the report also pointed out an area where TikTok should be improved. Except for TikTok, others in the list have the option to use the default browser to open the link. Currently, if you find a web link you want to browse in TikTok, you can only copy the link, then manually open the browser and paste it there. :
Of the seven apps Krausefx tested, TikTok was the only one that could monitor keyboard input, and it monitored more user activity than the other apps. Instagram, FB Messenger, Facebook and Amazon App also have JavaScrpit code. SnapChat and Robinhood have passed the test and all projects have a green light.
The article also mentioned that they hope that these Apps can cancel the built-in browser function and instead use Safari or Chrome, which most people will set as the default browser. They have also asked Apple, but have not received any response yet. As for the Android part, Krausefx has not tested it. This report is limited to the iOS version.
Source: KOCPC Chinese