News for hackers. Stuff that matters.

A comment on iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes. Parent comment

Re:iOS14 reveals that TikTok may snoop clipboard contents ev... by riskable on Wednesday June 24, 2020 @06:20PM (#23634532)
The problem is that iOS doesn't differentiate between a call that merely checks for the presence of a clipboard entry (e.g. so you can enable "Paste" in a menu/submenu) and actually copying the contents of the clipboard.

The workaround (for legitimate apps) is to simply always keep that "Paste" option enabled--even if the clipboard is empty. That way you won't freak out your users and only suffer the most minor of usability consequences.

Having said that I don't think TikTok has any relevant functionality such as enabling a "Paste" option so... Most likely nefarious!

[ Parent | on HN ]
Re:iOS14 reveals that TikTok may snoop clipboard contents ev... by selsta on Wednesday June 24, 2020 @06:27PM (#23634589)
iOS differentiates between this since iOS 10:

https://developer.apple.com/documentation/uikit/uipasteboard...

Also iOS 14 has new clipboard related APIs to further check the content without actually accessing it.

[ Parent | on HN ]
Re:iOS14 reveals that TikTok may snoop clipboard contents ev... by BoorishBears on Wednesday June 24, 2020 @07:18PM (#23634971)
If iOS 14 adds new APIs to check, then I wouldn't be surprised if the codepath hasStrings uses triggers the warning

The purpose of hasStrings was performance not indicating intent, so that wouldn't be surprising

[ Parent | on HN ]
Re:iOS14 reveals that TikTok may snoop clipboard contents ev... by pininja on Wednesday June 24, 2020 @06:50PM (#23634748)
> I don't think TikTok has any relevant functionality

Does pasting text into a video as an annotation require “Paste” to be enabled in this way?

[ Parent | on HN ]
Re:iOS14 reveals that TikTok may snoop clipboard contents ev... by ladberg on Wednesday June 24, 2020 @08:31PM (#23635475)
I believe any time you paste with the native keyboard UI up it doesn't go through the app. You only need to snoop the clipboard if you want to proactively use the data without having the user paste.
[ Parent | on HN ]