{"id":50091,"date":"2022-08-19T12:44:46","date_gmt":"2022-08-19T12:44:46","guid":{"rendered":"https:\/\/harchi90.com\/this-website-tells-you-what-private-information-apps-might-be-tracking\/"},"modified":"2022-08-19T12:44:46","modified_gmt":"2022-08-19T12:44:46","slug":"this-website-tells-you-what-private-information-apps-might-be-tracking","status":"publish","type":"post","link":"https:\/\/harchi90.com\/this-website-tells-you-what-private-information-apps-might-be-tracking\/","title":{"rendered":"This website tells you what private information apps might be tracking"},"content":{"rendered":"<div>\n<p id=\"kqmYqc\">Did you know you&#8217;re potentially being tracked when you load an in-app browser on iOS?  A new tool reveals exactly how, showing how applications like TikTok and Instagram can potentially use JavaScript to view sensitive data, including your address, passwords and credit card information, without your consent.<\/p>\n<p id=\"p5UJmp\">The tool can be found at InAppBrowser.com.  All you need to do is open the app you want to check and share the InAppBrowser.com URL somewhere within it \u2014 such as DMing the link to a friend or posting it in a comment.  From there, you can tap the link and get a report from the website on what scripts are running in the background.<\/p>\n<div class=\"c-float-right\">\n<aside id=\"X3lWHB\"><q>All you need to do is open the app you want to check, and share the InAppBrowser.com URL somewhere within it<\/q><\/aside>\n<\/div>\n<p id=\"hXirhM\">Don&#8217;t be intimidated if you&#8217;re unfamiliar with tech jargon, as the tool&#8217;s developer, Felix Krause, provides some FAQs that explain exactly what you&#8217;re seeing.  In response to questions on how best to protect yourself, Krause states, \u201cWhenever you open a link from any app, see if the app offers a way to open the currently shown website in your default browser.  During this analysis, every app besides TikTok offered a way to do this.\u201d<\/p>\n<p id=\"m2nKo2\">Krause is a security researcher and former Google employee who earlier this month shared a detailed report on how browsers within apps like Facebook, Instagram and TikTok can be a privacy risk for iOS users.<\/p>\n<p id=\"DPTdLY\">In-app browsers are used when you tap a URL within an app.  While these browsers are based on Safari&#8217;s WebKit on iOS, developers can adjust them to run their own JavaScript code, allowing them to track your activity without consent from you or the third-party websites you visit.<\/p>\n<div class=\"c-float-left\">\n<aside id=\"o4qArQ\"><q>Developers can browsers based on Safari&#8217;s WebKit to run their own JavaScript code, allowing them to track your activity.<\/q><\/aside>\n<\/div>\n<p id=\"67JOkg\">Apps can inject their JavaScript code into websites, allowing them to monitor how the user is interacting with the app.  This can include information on every button or link you tap, keyboard inputs and if screenshots were taken, though each app will vary in what information it collects.<\/p>\n<p id=\"N4aqIA\">In response to Krause&#8217;s earlier report, Meta justified the use of these custom tracking scripts by claiming that users already consent to apps like Facebook and Instagram tracking their data.  Meta also claims that the data retrieved is only used for targeted advertising or unspecified \u201cmeasurement purposes.\u201d<\/p>\n<p id=\"16ro0Z\">\u201cWe intentionally developed this code to honor people&#8217;s [Ask to track] choices on our platforms,\u201d a Meta spokesperson said.  \u201cThe code allows us to aggregate user data before using it for targeted advertising or measurement purposes.\u201d<\/p>\n<p id=\"6UY07M\">They added: \u201cFor purchases made through the in-app browser, we seek user consent to save payment information for the purposes of autofill.\u201d<\/p>\n<div class=\"c-float-right\">\n<aside id=\"SOXECt\"><q>\u201cFor purchases made through the in-app browser, we seek user consent to save payment information for the purposes of autofill.\u201d<\/q><\/aside>\n<\/div>\n<p id=\"82a0O8\">The tool Krause developed isn&#8217;t foolproof.  He admits it can&#8217;t detect all possible JavaScript commands being executed, and mentions that JavaScript is also used in legitimate development and isn&#8217;t inherently malicious.  He notes, \u201cThis tool can&#8217;t detect all JavaScript commands executed, as well as doesn&#8217;t show any tracking the app might do using native code (like custom gesture recognizers)\u201d.  Still, this offers a user-friendly way for iOS users to check on their digital footprint across their favorite applications.<\/p>\n<p id=\"S8v2b6\">Krause has also made the tool open source, stating \u201cInAppBrowser.com is designed for everybody to verify for themselves what apps are doing inside their in-app browsers.  I have decided to open source the code used for this analysis, you can check it out on GitHub.  This allows the community to update and improve this script over time.\u201d  You can read more about it on his website.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Did you know you&#8217;re potentially being tracked when you load an in-app browser on iOS? A new tool reveals exactly how, showing how applications like TikTok and Instagram can potentially use JavaScript to view sensitive data, including your address, passwords and credit card information, without your consent. The tool can be found at InAppBrowser.com. All &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/harchi90.com\/this-website-tells-you-what-private-information-apps-might-be-tracking\/\"> <span class=\"screen-reader-text\">This website tells you what private information apps might be tracking<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[4],"tags":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":53276,"url":"https:\/\/harchi90.com\/this-tool-checks-if-in-app-browsers-are-tracking-you\/","url_meta":{"origin":50091,"position":0},"title":"This Tool Checks If In-App Browsers Are Tracking You","date":"August 22, 2022","format":false,"excerpt":"photo: AngieYeoh (Shutterstock)In-app browsers are bunk compared to full-featured browsing apps, but they're also a major privacy and security risk. Many apps sneak data trackers onto websites you visit through their in-app browser using a method called Javascript injection, which adds extra code to a page as it loads. These\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"Jachs NY Summer Sale","src":"https:\/\/i0.wp.com\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fill,fl_progressive,g_center,h_180,q_80,w_320\/973d8e6aba46da39011c71cdf42fbfc4.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":49935,"url":"https:\/\/harchi90.com\/tiktoks-in-app-browser-reportedly-capable-of-monitoring-anything-you-type\/","url_meta":{"origin":50091,"position":1},"title":"TikTok&#8217;s In-App Browser Reportedly Capable of Monitoring Anything You Type","date":"August 19, 2022","format":false,"excerpt":"TikTok's custom in-app browser on iOS reportedly injects JavaScript code into external websites that allows TikTok to monitor \"all keyboard inputs and taps\" while a user is interacting with a given website, according to security researcher Felix Krause, but TikTok has reportedly denied that the code is used for malicious\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"tik tok logo","src":"https:\/\/i0.wp.com\/images.macrumors.com\/t\/iEPoSksam5It_TajWR7FSueKcMg=\/400x0\/article-new\/2020\/08\/tiktok-logo.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":55634,"url":"https:\/\/harchi90.com\/tiktok-can-secretly-track-your-web-activity\/","url_meta":{"origin":50091,"position":2},"title":"TikTok can secretly track your web activity!","date":"August 25, 2022","format":false,"excerpt":"TikTok can track users' screen taps when they visit other sites through its iOS app, new research reveals. The video sharing platform runs code that enables it to observe the entry of text input, like credit card details and passwords, during 'in-app browsing'.This is when the user opens a third-party\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"TikTok runs code that enables it to track users' screen taps when they visit other sites through its iOS app, new research reveals.  The video sharing platform can observe the entry of text input, like credit card details and passwords, during 'in-app browsing'","src":"https:\/\/i0.wp.com\/i.dailymail.co.uk\/1s\/2022\/07\/04\/17\/59853839-10981075-image-m-3_1656952129867.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":50337,"url":"https:\/\/harchi90.com\/tiktoks-in-app-browser-could-be-keylogging-privacy-analysis-warns-techcrunch\/","url_meta":{"origin":50091,"position":3},"title":"TikTok&#8217;s in-app browser could be keylogging, privacy analysis warns \u2013 TechCrunch","date":"August 19, 2022","format":false,"excerpt":"'Beware in-app browsers' is a good rule of thumb for any privacy conscious mobile app user \u2014 given the potential for an app to leverage its hold on user attention to snoop on what you're looking at via browser software it also controls. But eyebrows are being raised over the\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":42191,"url":"https:\/\/harchi90.com\/kwk-ep-6-arjun-kapoor-thought-of-malaikas-last-before-revealing-relationship-webseries\/","url_meta":{"origin":50091,"position":4},"title":"KWK ep 6: Arjun Kapoor thought of Malaika&#8217;s last before revealing relationship |  WebSeries","date":"August 11, 2022","format":false,"excerpt":"Arjun Kapoor appeared on the latest episode of Koffee With Karan with his cousin Sonam Kapoor. During the episode, Arjun spoke in detail about his relationship with Malaika Arora. The actor said that he waited a while before going public with his relationship with Malaika Arora to respect the people\u2026","rel":"","context":"In &quot;Entertainment&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"fifu_image_url":"https:\/\/cdn.vox-cdn.com\/thumbor\/9U8Ykd-eFH4rOCadI8mBd5zwDdk=\/0x146:2040x1214\/fit-in\/1200x630\/cdn.vox-cdn.com\/uploads\/chorus_asset\/file\/15948812\/akrales_180614_1777_0110.jpg","_links":{"self":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/50091"}],"collection":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/comments?post=50091"}],"version-history":[{"count":0,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/50091\/revisions"}],"wp:attachment":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/media?parent=50091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/categories?post=50091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/tags?post=50091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}