This website reveals how TikTok, Instagram can track your data


A website called claims it can reveal how platforms like TikTok and Instagram can potentially view your sensitive data, including address, passwords and credit card information, without your consent. The website has a tool that will let users know how much popular social media platforms are injecting “JavaScript code into third-party websites that lead to potential security and privacy risks for the user. “.

According to the tool’s developer, Felix Krause, has a simple tool to “list the JavaScript commands executed by the iOS app rendering the page.” is designed so that everyone can see for themselves what apps are doing in their built-in browsers.

“To try this tool yourself, open an app you want to analyze, share the URL, tap the link inside the app to open it, then read the on-screen report,” said he mentioned in a blog post. “I decided to open the code used for this analysis, you can check it out on GitHub. This allows the community to update and improve this script over time,” he added.

Earlier this week, it warned that the abbreviated Chinese video app TikTok could monitor all keyboard inputs and presses through its in-app browser on iOS.

TikTok said in a statement that Krause’s conclusions about the company are “incorrect and misleading.”

“Contrary to its claims, we do not collect typing or text input through this code, which is only used for debugging, troubleshooting, and performance monitoring,” the company said.

Krause also conducted a study on Instagram and Facebook’s iOS app where he found that both of these apps can track online activity by using the in-app browser to open third-party links, instead of use Apple’s built-in safari browser.

These applications, explains the researcher, inject “their JavaScript code into each website displayed, including when you click on advertisements. Even though pcm.js doesn’t, injecting custom scripts into third-party websites allows them to monitor all user interactions, like every button and link typed, text selections, screenshots, as well as all form entries, such as passwords, addresses, and credit card numbers.”

(With contributions from IANS)

Catch all the tech news and updates on Live Mint. Download the Mint News app to get daily market updates and live trade news.

More less

To subscribe to Mint Bulletins

* Enter a valid email

* Thank you for subscribing to our newsletter.


Comments are closed.