See what JavaScript commands get injected through an in-app browser (krausefx.com)

Article summary

The article discusses the potential security and privacy risks of in-app browsers, specifically how some apps like Instagram and TikTok inject JavaScript code into third-party websites. This can allow the apps to monitor user interactions, including keystrokes and taps. The article introduces a tool, InAppBrowser.com, that can detect some of the JavaScript commands executed by iOS apps. The tool found that TikTok and Instagram subscribe to keyboard inputs and taps on external websites rendered inside their apps.

Main themes

• in-app browsers
• data collection
• privacy risks
• reciprocity clauses
• trade practices
• first amendment
• national security
• user control
• transparency
• protectionism

What commenters say

• Some commenters think that the data collection by TikTok and Instagram is acceptable because it improves the user experience and ad targeting.
• Others argue that users should have control over their data and be able to opt-out of such tracking.
• There is a debate about whether reciprocity clauses, which would require Chinese companies to allow US companies to operate in China with the same freedoms, are a good idea.
• Some commenters believe that the first amendment protects the distribution of software, including TikTok, in the US, while others argue that this does not apply to foreign companies.
• A few commenters suggest that the US should regulate or ban TikTok due to its data collection practices and ties to the Chinese government.
• Others think that the issue is not with TikTok itself, but with the lack of transparency and control over data collection in general.
• Some argue that protectionism and reciprocity clauses can create an uneven playing field and stifle competition.
• A few commenters think that the focus should be on educating users about the risks of in-app browsers and promoting better security and privacy practices.
• There is a discussion about the fairness of China's trade practices and whether US companies should be allowed to operate in China with the same freedoms as Chinese companies in the US.
• Some commenters believe that the issue is more complex and nuanced, and that a balanced approach is needed to address the concerns around data collection and national security.