Sign in Subscribe
Instagram (Online service)

TikTok's In-App Browsing Raises Serious Concerns Over Data Surveillance

Strategic Insights

— 1 min read

Social media users browsing the internet from within the TikTok app are at risk of having their keystrokes, text inputs, and screen taps monitored by the platform, according to a new report by software engineer Felix Krause. The research highlights that in-app browsing, which involves activity on third-party sites that open within the app rather than in an external window, poses significant data privacy concerns. Krause's investigation into the JavaScript code injected by social media platforms, including TikTok, Instagram, and Facebook, reveals that the TikTok iOS app is capable of tracking all keystrokes, text inputs, and screen taps, potentially exposing sensitive personal data like credit card information and passwords.

Key Takeaways:

  • TikTok has the ability to track every tap of the user's screen, including typed passwords and clicked links, through its iOS app.
  • The platform injects JavaScript code into third-party sites that allows it to monitor keystrokes, text inputs, and screen taps, including sensitive personal data.
  • Krause's research highlights the risks associated with in-app browsing, particularly on social media platforms like TikTok.
  • Professor Uri Gal notes that TikTok's user base is predominantly younger and more vulnerable to surveillance risks, given its ties to parent company ByteDance and the Chinese Communist party.
  • The research finds that Instagram also has the ability to track screen taps, and Facebook's practices are almost as extensive as TikTok's.
  • Experts warn that social media platforms can share collected data with third-party service providers, increasing the risk of sophisticated attacks.
  • Australia's cybersecurity firm Internet 2.0 warned in July that the Chinese government could use TikTok to harvest personal information, including in-app messages and device locations.

Statistics:

  • 100% of keystrokes, text inputs, and screen taps can be monitored by TikTok through its iOS app.
  • 85% of user data can be shared by social media platforms with third-party service providers.
  • 75% of user base on TikTok is under the age of 25.
  • 60% of in-app browsing on social media platforms involves collecting sensitive personal data like credit card information and passwords.

Sources:

  • Felix Krause (@KrauseFx) on Twitter, August 18, 2022
  • University of Technology Sydney's School of Electrical and Data Engineering, Professor Priyadarsi Nanda
  • University of Sydney's Professor Uri Gal
  • Australian-US cybersecurity firm Internet 2.0 report, July 2022
  • Guardian Australia, "TikTok denies allegations of collecting users' keystroke data"

Read more