Felix Krause

I can't find it, unfortunately, despite checking my purchase history and googling for relevant terms. I can't remember if it was even an official app - it might have just been a proof-of-concept with testflight. It was part of a blog post from a security researcher who was describing the situation, and it was prior to the "selected photos" permission, so I doubt it would work now anyway. EDIT: Found it: https://krausefx.com/blog/ios-privacy-detectlocation-an-easy-way-to-ac… Also worth checking out the author's other projects: https://krausefx.com/projects

>Characterizing device information and IP addresses as "privacy violations" is a stretch. I agree: this is a characterization I never made. FYI, I also collect this type of data about you when you visit my website. That said, telemetry + totalitarianism = bad combo. >Irrelevant. The data collection is done by first parties. Encryption doesn't do anything. Even if data is collected by first parties, encryption is still highly relevant because it ensures that the data remains secure in transit and at rest. It does a lot. >What does this have to do with privacy? Again, it's fine to be against "blatant algorithmic manipulation of social platforms" or whatever, but dragging seemingly unrelated topics in an attempt to amass as big pile of greviances as possible is disingenuous. You are aggressive for no reason whatsoever. There's nothing disingenuous: when users are shadow-banned by platforms under dictatorships, they end up flagged, and their private data is often analyzed for nefarious reasons. There's a link with privacy but I'll stop at this stage if we cannot have a civilized discussion. >Where's the keylogging? I skimmed the article and the only thing I could find was a passing mention about an article that you "was advised not to publish it and I didn’t". How much keylogging could possibly going on in a short video app? Is the "keylogging" just a way to make "we measure how engaged someone is with a video" as sinister as possible? “TikTok iOS subscribes to every…

Meta uses the in app browsers to inject trackers on every site you visit. https://krausefx.com//blog/ios-privacy-instagram-and-facebook-can-trac… Probably others doing the same. I always open pages in full safari and use NextDns to block trackers in all apps.

Yes, there are ways to distinguish between them as a user, for example you can check to see if your browser plugins are available. I also went through some of the most popular iOS apps and created a list of which app uses the correct SFSafariViewController vs the potentially malicious WKWebView. - https://krausefx.com/blog/ios-privacy-instagram-and-facebook-can-track… - https://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascri…

Take a look: https://krausefx.com/blog/ios-privacy-instagram-and-facebook-can-track…

Don't many apps use their own in app browser and not Safari? https://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascri… I always thought that a company should make an app those does something trivially, but also has its own in app browser as the true functionality.

Let's not forget that the in-app browser page can be injected with whatever javascript the owner of the app wants. FB/Instagram use this for tracking. There is a more comprehensive list of what apps do this somewhere; I do not remember where it is. But for FB/Meta, you can find the info here: https://krausefx.com/blog/ios-privacy-instagram-and-facebook-can-track…

For context, fastlane is “a tool for iOS and Android developers to automate tedious tasks like generating screenshots, dealing with provisioning profiles, and releasing your application.” https://github.com/fastlane/fastlane Google seems to have acquired(?) it in 2017: https://krausefx.com/blog/fastlane-is-joining-google I would guess this means they hired the lead developer(s) and funded a team to work on the project.

I was very impressed by Felix Krause, who collected more than 380.000 data points over 3 years about his life in a single database and shared many of his learnings publicly: https://krausefx.com/blog/how-i-put-my-whole-life-into-a-single-databa…

Orignal blogpost: https://krausefx.com/blog/ios-privacy-stealpassword-easily-get-the-use… Discussion: https://news.ycombinator.com/item?id=15441537

Quite a few ways, whether through device/session fingerprinting [1], in-app browser keystroke tracking [2], frequent third-party post requests [3], individiual app usage patterns [4], geo-tracking [5], dark-patterned user onboarding [6] and continual facial recognition [7]. A canary blog series kicked off by the company itself is worth keeping an eye on to see the 'myths' they want to debunk most scrupously (such as keytracking)[8]. [1]: https://www.nullpt.rs/reverse-engineering-tiktok-vm-1 [2]: https://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascri… [3]: https://app.urlgeni.us/blog/new-research-across-200-ios-apps-hints-sur… [4]: https://www.nytimes.com/2021/12/05/business/media/tiktok-algorithm.htm… [5]: https://www.afr.com/technology/tiktok-admits-collecting-location-data-… [6]: https://au.reset.tech/uploads/resettechaustralia_policymemo_tiktok_fin… [7]: https://www.npr.org/2021/02/25/971460327/tiktok-to-pay-92-million-to-s… [8]: https://newsroom.tiktok.com/en-us/tiktok-truths-a-new-series-on-our-pr…

> Agreed. Rarely has a negative word about any Apple product been written on Daring Fireball. I pulled these from the front page of DF today, 2017-10-18. While John Gruber clearly writes an abundance of positive Apple stories, your charactarization is inaccurate. THE IMPOSSIBLE DREAM OF USB-C > USB-C is a dual disaster… Now that all modern Apple MacBooks are USB-C-only, USB-C’s problems are MacBook problems, too. https://marco.org/2017/10/14/impossible-dream-of-usb-c IOS IS RIPE FOR PHISHING PASSWORD PROMPTS https://krausefx.com/blog/ios-privacy-stealpassword-easily-get-the-use… IPHONE CHARGING TIMES BY CHARGER > I’m on the side that this is Apple cheaping out. https://twitter.com/dwlz/status/917443870509715456 Cultural Insularity and Apple TV > It’s not enough to make a better set-top box. It has to be obviously better. I don’t think Apple TV’s current lineup makes that case. https://daringfireball.net/2017/09/cultural_insularity_and_apple_tv

Yes. It is exactly that. [0] [1] [2] [3] [4] [5] I thought Facebook was worse, but looking at TikTok, it takes the most invasive spyware crown. At this point if the solution is to outlaw all invasive tracking for all companies, the first thing to do is like how Facebook got a multi-billion dollar fine by the FTC, TikTok (and repeat offenders) must be fined in the tens of billions, if they want to continue operating in the US and to stop them from violating user privacy by their invasive data collection. [0] https://www.nrk.no/osloogviken/xl/tiktok-doesn_t-show-the-war-in-ukrai… [1] https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-tapes-us-u… [2] https://techcrunch.com/2021/10/26/tiktok-dodges-questions-about-biomet… [3] https://techcrunch.com/2021/06/03/tiktok-just-gave-itself-permission-t… [4] https://twitter.com/crobertsbmw/status/1427102606753550337 [5] https://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascri…