📬 Datenschutz-Albtraum: iPhone-Apps sammeln heimlich Daten
#Datenschutz #Smartphones #Datensammlung #DigitalePrivatsphäre #fingerprinting #iPhone #MyskInc #Nutzerdaten #Nutzertracking #TalalHajBakry #TommyMysk #Tracking https://sc.tarnkappe.info/c0ae62

Beware rogue 2FA apps in App Store and Google Play – don’t get hacked! - Even in Apple's and Google's "walled gardens", there are plenty of 2FA apps that are eith... https://nakedsecurity.sophos.com/2023/02/27/beware-rogue-2fa-apps-in-app-store-and-google-play-dont-get-hacked/ #2-factorauthentication #authenticatorapp #authenticator #cryptography #tommymysk #dataloss #malware #mysk_co #totp #2fa

iOS 14 flags TikTok, 53 other apps spying on iPhone clipboards - TikTok, for one, promised to knock this off months ago but was caught red-handed, still at it, by ... more: https://nakedsecurity.sophos.com/2020/06/30/ios-14-flags-tiktok-53-other-apps-spying-on-iphone-clipboards/ #universalclipboard #bitcoinaddresses #cryptocurrency #socialnetworks #uncategorized #talalhajbakry #videosharing #clipboards #passwords #tommymysk #privacy #mobile #tiktok #china #ios

TikTok To Stop Clipboard Snooping After Apple Privacy Feature Exposes Behavior - App will stop reading users’ device cut-and-paste data after a new banner alert in an Apple update... more: https://threatpost.com/tiktok-to-stop-clipboard-snooping-after-apple-privacy-feature-exposes-behavior/156945/ #mobilesecurity #vulnerability #cutandpaste #dataprivacy #clipboard #mobileapp #tommymysk #privacy #android #tiktok #apple #mysk #ios

♲ @:

Popular iPhone and iPad Apps Reportedly 'Snooping' on Pasteboard Data

According to new research by Talal Haj Bakry and Tommy Mysk, dozens of popular iOS apps are reading the contents of the pasteboard without user consent, which could include sensitive information.

The investigation discovered that many popular apps, such as TikTok, 8 Ball Pool™, and Hotels.com, quietly read any text found in the pasteboard every time the app is opened.

iOS and iPadOS apps have unrestricted access to the system-wide pasteboard, also known as the clipboard, as of iOS 13.3.

Text left in the pasteboard may be inconsequential, but it could also be highly sensitive data such as passwords or financial information. The potential security risks of this vulnerability have previously been investigated by Bakry and Mysk, where they found that precise location information was leaking through the system pasteboard.

A diverse range of apps, from popular games and social networking apps, to news apps of major news organizations such as Fox News or The Wall Street Journal, were examined using standard Apple development tools. Many of these apps do not provide any UI that manages text, yet they read the text content of the pasteboard every time they are opened.

It is also of note that if Universal Clipboard is enabled, an app may also access whatever has been copied on a Mac.

What exactly these apps do with the contents of the pasteboard once they have read it is unknown.

Tag: iOS 13

This article, "Popular iPhone and iPad Apps Reportedly 'Snooping' on Pasteboard Data" first appeared on MacRumors.com

Discuss this article in our forums

feeds.macrumors.com/~ff/MacRum… feeds.macrumors.com/~ff/MacRum… feeds.macrumors.com/~ff/MacRum…
#iOS #apps #ITSecurity #iOSSecurity #MacRumors #TalalHajBakry #TommyMysk #pasteboard
#tiktok #NYTimes #NPR #Reuters #RussiaToday #PUBG #PlantsVsZombies #AccuWeather #AliExpress #Hotels.com #HotelTonight