HackerTube

iOS14 Catches Apps Spying on Your Clipboard

Ryan JonesCited 7× on HN, 2020–2020
YouTube
demo · general · 2020–2020 on HN

A one-minute demonstration of iOS 14's new paste notification, which revealed popular apps silently reading the clipboard each time they were opened. It credits the mysk research write-up.

HN cites it as evidence that many mainstream apps, not just TikTok, were snooping on clipboard contents.

7 comments from Hacker News

@xster2020-12 · in “U.S. Judge Halts TikTok Ban”

It was "caught" because that's the only one the consent manufacturers reported on. ▶ this video Most of the apps in your home screen did it when the beta came out from NYTimes to Google News to Chrome to AccuWeather etc. TikTok shows a pop-up preview of the TikTok link you have in your clipboard when you open TikTok. It might be that, it might be more. But it's certainly not more special than other apps.

@ourcat2020-07 · in “LinkedIn is copying the contents of my clipboard on every keystroke”

When I saw this video of a lot more apps doing it, I did wonder if it actually might be a commonly used third-party library causing this. It's certainly possible. ▶ this video

@xster2020-07 · in “Amazon says email banning TikTok from employee phones was ‘sent in error’”

▶ this video Here's a rundown of just general apps that would be on everyone's home screens doing the same thing.

@SirensOfTitan2020-06 · in “iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes”

It seems like a ton of apps are abusing this feature: ▶ this video I categorize this as another reason why "just trust us," just isn't acceptable enough when it comes to data privacy and ownership. Companies just cannot be trusted to treat their users' data with respect given the option of: profit or privacy. (sourced from reddit: link )

@mrtksn2020-06 · in “iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes”

>It seems like a ton of apps are abusing this feature: ▶ this video Okay, this could be simply a dynamic link library checking for a deep link in the clipboard. Why do this? To preserve the state after install. Firebase does it. When you click on a deep link but you don't have the app installed, the webpage would copy the url to clipboard and open the App Store, after you install the app and open it Firebase would check the clipboard and take you to the the correct screen. The apps in the video don't need to be malicious, they simply could be checking if there's a deep link in the clipboard to restore user session. Of course, with iOS 14 the best practice would be to do this only once after the install.