Skip to content
 
If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(Ars Technica)   TikTok and 32 other iOS apps still read your clipboard when they open. Yes, this can include your passwords and other sensitive data   (arstechnica.com) divider line
    More: Scary, App Store, Apple Inc., IPhone, IPhone OS, dozen iOS apps, IPad, Tommy Mysk, researchers Talal Haj Bakry  
•       •       •

932 clicks; posted to Fandom » on 03 Jul 2020 at 11:19 AM (22 weeks ago)   |   Favorite    |   share:  Share on Twitter share via Email Share on Facebook



24 Comments     (+0 »)
 
View Voting Results: Smartest and Funniest
 
2020-07-03 10:43:53 AM  
1) Open Notes
2) Type "Stop reading my farking clipboard, assholes!"
3) Tap+Hold+Copy
4) Load app
 
2020-07-03 11:30:18 AM  
Are there any mobile apps that don't suck for one reason or another?

I feel like anything I install on my phone is treating me like a victim rather than a customer.

/not just ios obviously but android as well
 
2020-07-03 11:32:38 AM  

casual disregard: Are there any mobile apps that don't suck for one reason or another?

I feel like anything I install on my phone is treating me like a victim rather than a customer.

/not just ios obviously but android as well


If you paid for it, then you're right.

If it was free, then you are not their customer, you are their product.
 
2020-07-03 11:34:50 AM  

casual disregard: Are there any mobile apps that don't suck for one reason or another?

I feel like anything I install on my phone is treating me like a victim rather than a customer.

/not just ios obviously but android as well


The Rusty Lake and Room games seem fairly innocuous.
 
2020-07-03 11:36:16 AM  
Why would you copy your password to the Clipboard?  (Unless it means something different in IOS world that other Operating Systems.)
 
2020-07-03 11:37:50 AM  

Psychopusher: casual disregard: Are there any mobile apps that don't suck for one reason or another?

I feel like anything I install on my phone is treating me like a victim rather than a customer.

/not just ios obviously but android as well

If you paid for it, then you're right.

If it was free, then you are not their customer, you are their product.


Yeah that's fair. My phone is little more than a Sudoku and Picross / Nonograms machine for toilet time. Oddly enough the best Picross / Nonograms game I've found is by Konami who doesn't even make games anymore. All the others I tried had this weird combination of gentle music and then REALLY LOUD VIDEO ADS.

/i'm accepting suggestions for better games
 
2020-07-03 11:44:06 AM  

EasilyDistracted: Why would you copy your password to the Clipboard?  (Unless it means something different in IOS world that other Operating Systems.)


Password Managers are the best reason someone would do this. I'm assuming iOS autofill likely doesn't exist, or makes use of the clipboard. Not sure as I don't use iOS.
 
2020-07-03 11:45:56 AM  

casual disregard: Yeah that's fair. My phone is little more than a Sudoku and Picross / Nonograms machine for toilet time. Oddly enough the best Picross / Nonograms game I've found is by Konami who doesn't even make games anymore. All the others I tried had this weird combination of gentle music and then REALLY LOUD VIDEO ADS.

/i'm accepting suggestions for better games


I don't game on my phone much these days either.  The odd word game, perhaps, and most recently Elder Scrolls: Blades, because Elder Scrolls, which I'm pleasantly surprised by.  (Fight mechanic suck ass, but it's a mobile game, and I'm in it more for the zen-ish world exploration and RPG-lite mechanics anyway.)  But I also recognize that if I'm trying a free app, it wants something from me, so I tend to install only stuff I'm genuinely interested in, rather than scattershot downloading and trying all sorts of crap.
 
2020-07-03 11:47:35 AM  

Quantumbunny: EasilyDistracted: Why would you copy your password to the Clipboard?  (Unless it means something different in IOS world that other Operating Systems.)

Password Managers are the best reason someone would do this. I'm assuming iOS autofill likely doesn't exist, or makes use of the clipboard. Not sure as I don't use iOS.


iOS' built-in password management uses a cloud-based keychain system.  Not sure how hard it is to snoop on, but it's built on the premise of security at any rate, so I don't expect it uses the clipboard with plaintext passwords.
 
2020-07-03 11:51:02 AM  

Psychopusher: casual disregard: Yeah that's fair. My phone is little more than a Sudoku and Picross / Nonograms machine for toilet time. Oddly enough the best Picross / Nonograms game I've found is by Konami who doesn't even make games anymore. All the others I tried had this weird combination of gentle music and then REALLY LOUD VIDEO ADS.

/i'm accepting suggestions for better games

I don't game on my phone much these days either.  The odd word game, perhaps, and most recently Elder Scrolls: Blades, because Elder Scrolls, which I'm pleasantly surprised by.  (Fight mechanic suck ass, but it's a mobile game, and I'm in it more for the zen-ish world exploration and RPG-lite mechanics anyway.)  But I also recognize that if I'm trying a free app, it wants something from me, so I tend to install only stuff I'm genuinely interested in, rather than scattershot downloading and trying all sorts of crap.


I feel you. The Konami Picross is genuinely good and has classic Konami music including from old arcade games so that's a bonus.

It makes me feel old to know that I played Contra so often that I was able to hit the score limit without losing any lives. I feel like that was time well spent.
 
2020-07-03 12:56:02 PM  
Opens article... Control+F "Fark" = nothing.


Very good!
 
2020-07-03 1:09:05 PM  
Xi knows all.
 
2020-07-03 1:15:51 PM  

Psychopusher: Quantumbunny: EasilyDistracted: Why would you copy your password to the Clipboard?  (Unless it means something different in IOS world that other Operating Systems.)

Password Managers are the best reason someone would do this. I'm assuming iOS autofill likely doesn't exist, or makes use of the clipboard. Not sure as I don't use iOS.

iOS' built-in password management uses a cloud-based keychain system.  Not sure how hard it is to snoop on, but it's built on the premise of security at any rate, so I don't expect it uses the clipboard with plaintext passwords.


But if you use a third party app password manager on iOS you're basically forced to use copy paste instead of iOS' secure password storage.

And you would use a third party manager if your personal ecosystem is heterogenous across PC, MacOS, Android, and iOS.
 
2020-07-03 1:27:31 PM  
All I want to know is the list.  (OK, I also want to know who's putting my damn passwords in the clipboard to begin with, but that may be too much to ask for.)

[Let's see if Fark's cr/lf gremlin farks this post up good...]

In all, the researchers found the following iOS apps were reading users' clipboard data every time the app was opened with no clear reason for doing so:

App Name - BundleID

--News
ABC News -
com.abcnews.ABCNews
Al Jazeera English -ajenglishiphone
CBC News - ca.cbc.CBCNews
CBS News - com.H443NM7F8H.CBSNews
CNBC - com.nbcuni.cnbc.cnbcrtipad
Fox News - com.foxnews.foxnews
News Break - com.particlenews.newsbreak
New York Times - com.nytimes.NYTimes
NPR - org.npr.nprnews
ntv Nachrichten - de.n-tv.n-tvmobil
Reuters - com.thomsonreuters.Reuters
Russia Today - com.rt.RTNewsEnglish
Stern Nachrichten - de.grunerundjahr.sternneu
The Economist - com.economist.lamarr
The Huffington Post - com.huffingtonpost.HuffingtonPost
The Wall Street Journal - com.dowjones.WSJ.ipad
Vice News - com.vice.news.VICE-News

--Games
8 Ball Pool™ -
com.miniclip.8ballpoolmult
AMAZE!!! - com.amaze.game
Bejeweled - com.ea.ios.bejeweledskies
Block Puzzle -Game.BlockPuzzle
Classic Bejeweled - com.popcap.ios.Bej3
Classic Bejeweled HD -com.popcap.ios.Bej3HD
FlipTheGun - com.playgendary.flipgun
Fruit Ninja - com.halfbrick.FruitNinjaLite
Golfmasters - com.playgendary.sportmasterstwo
Letter Soup - com.candywriter.apollo7
Love Nikki - com.elex.nikki
My Emma - com.crazylabs.myemma
Plants vs. Zombies™ Heroes - com.ea.ios.pvzheroes
Pooking - Billiards City - com.pool.club.billiards.city
PUBG Mobile - com.tencent.ig
Tomb of the Mask - com.happymagenta.fromcore
Tomb of the Mask: Color - com.happymagenta.totm2
Total Party Kill - com.adventureislands.totalpartykill
Watermarbling - com.hydro.dipping

--Social Networking
TikTok -
com.zhiliaoapp.musically
ToTalk - totalk.gofeiyu.com
Tok - com.SimpleDate.Tok
Truecaller - com.truesoftware.TrueCallerOther
Viber - com.viber
Weibo - com.sina.weibo
Zoosk - com.zoosk.Zoosk

--Other
10% Happier: Meditation -
com.changecollective.tenpercenthappi​er
5-0 Radio Police Scanner - com.smartestapple.50radiofree
Accuweather - com.yourcompany.TestWithCustomTabs
AliExpress Shopping App - com.alibaba.iAliexpress
Bed Bath & Beyond -com.digby.bedbathbeyond
Dazn - com.dazn.theApp
Hotels.com - com.hotels.HotelsNearMe
Hotel Tonight - com.hoteltonight.prod
Overstock - com.overstock.app
Pigment - Adult Coloring Book - com.pixite.pigment
Recolor Coloring Book to Color - com.sumoing.ReColor
Sky Ticket - de.sky.skyonline
The Weather Network -com.theweathernetwork.weathereyeipho​ne
 
2020-07-03 1:35:51 PM  

bughunter: All I want to know is the list.  (OK, I also want to know who's putting my damn passwords in the clipboard to begin with, but that may be too much to ask for.)

[Let's see if Fark's cr/lf gremlin farks this post up good...]

In all, the researchers found the following iOS apps were reading users' clipboard data every time the app was opened with no clear reason for doing so:

App Name - BundleID

--News
ABC News - com.abcnews.ABCNews
Al Jazeera English -ajenglishiphone
CBC News - ca.cbc.CBCNews
CBS News - com.H443NM7F8H.CBSNews
CNBC - com.nbcuni.cnbc.cnbcrtipad
Fox News - com.foxnews.foxnews
News Break - com.particlenews.newsbreak
New York Times - com.nytimes.NYTimes
NPR - org.npr.nprnews
ntv Nachrichten - de.n-tv.n-tvmobil
Reuters - com.thomsonreuters.Reuters
Russia Today - com.rt.RTNewsEnglish
Stern Nachrichten - de.grunerundjahr.sternneu
The Economist - com.economist.lamarr
The Huffington Post - com.huffingtonpost.HuffingtonPost
The Wall Street Journal - com.dowjones.WSJ.ipad
Vice News - com.vice.news.VICE-News

--Games
8 Ball Pool™ - com.miniclip.8ballpoolmult
AMAZE!!! - com.amaze.game
Bejeweled - com.ea.ios.bejeweledskies
Block Puzzle -Game.BlockPuzzle
Classic Bejeweled - com.popcap.ios.Bej3
Classic Bejeweled HD -com.popcap.ios.Bej3HD
FlipTheGun - com.playgendary.flipgun
Fruit Ninja - com.halfbrick.FruitNinjaLite
Golfmasters - com.playgendary.sportmasterstwo
Letter Soup - com.candywriter.apollo7
Love Nikki - com.elex.nikki
My Emma - com.crazylabs.myemma
Plants vs. Zombies™ Heroes - com.ea.ios.pvzheroes
Pooking - Billiards City - com.pool.club.billiards.city
PUBG Mobile - com.tencent.ig
Tomb of the Mask - com.happymagenta.fromcore
Tomb of the Mask: Color - com.happymagenta.totm2
Total Party Kill - com.adventureislands.totalpartykill
Watermarbling - com.hydro.dipping

--Social Networking
TikTok - com.zhiliaoapp.musically
ToTalk - totalk.gofeiyu.com
Tok - com.SimpleDate.Tok
Truecaller - com.truesoftware.TrueCallerOther
Viber - com.viber
Weibo - com.sina.weibo
Zoos ...


The only one of those I've used with any frequency is The Weather network -- and even that I rarely ever use as the built-in weather is good enough.  So not using TWN isn't going to be a problem.
 
2020-07-03 1:40:11 PM  
Google ad API.
Of course it's hoovering up all your data.
 
2020-07-03 2:55:40 PM  
 
2020-07-03 2:56:40 PM  

Esc7: Psychopusher: Quantumbunny: EasilyDistracted: Why would you copy your password to the Clipboard?  (Unless it means something different in IOS world that other Operating Systems.)

Password Managers are the best reason someone would do this. I'm assuming iOS autofill likely doesn't exist, or makes use of the clipboard. Not sure as I don't use iOS.

iOS' built-in password management uses a cloud-based keychain system.  Not sure how hard it is to snoop on, but it's built on the premise of security at any rate, so I don't expect it uses the clipboard with plaintext passwords.

But if you use a third party app password manager on iOS you're basically forced to use copy paste instead of iOS' secure password storage.

And you would use a third party manager if your personal ecosystem is heterogenous across PC, MacOS, Android, and iOS.


Nope.  The available API works with third party password managers too.
 
2020-07-03 3:17:39 PM  

Psychopusher: 1) Open Notes
2) Type "Xi suck massive donkey dicks!"
3) Tap+Hold+Copy
4) Load app


There ya go
 
ZAZ [TotalFark]
2020-07-03 4:22:06 PM  
I don't copy my password in iOS, but I have used one time password generators that copied the password to a clipboard.
 
2020-07-03 5:10:40 PM  
Is there any reason to do this other than "because they can?" What marketing data are they going to get from it? A youtube URL you shared with someone? A tinder message you worked on outside the app? The Anakin-Ahsoka copypasta?
 
2020-07-03 8:18:39 PM  

Psychopusher: bughunter: All I want to know is the list.  (OK, I also want to know who's putting my damn passwords in the clipboard to begin with, but that may be too much to ask for.)

[Let's see if Fark's cr/lf gremlin farks this post up good...]

In all, the researchers found the following iOS apps were reading users' clipboard data every time the app was opened with no clear reason for doing so:

App Name - BundleID

--News
ABC News - com.abcnews.ABCNews
Al Jazeera English -ajenglishiphone
CBC News - ca.cbc.CBCNews
CBS News - com.H443NM7F8H.CBSNews
CNBC - com.nbcuni.cnbc.cnbcrtipad
Fox News - com.foxnews.foxnews
News Break - com.particlenews.newsbreak
New York Times - com.nytimes.NYTimes
NPR - org.npr.nprnews
ntv Nachrichten - de.n-tv.n-tvmobil
Reuters - com.thomsonreuters.Reuters
Russia Today - com.rt.RTNewsEnglish
Stern Nachrichten - de.grunerundjahr.sternneu
The Economist - com.economist.lamarr
The Huffington Post - com.huffingtonpost.HuffingtonPost
The Wall Street Journal - com.dowjones.WSJ.ipad
Vice News - com.vice.news.VICE-News

--Games
8 Ball Pool™ - com.miniclip.8ballpoolmult
AMAZE!!! - com.amaze.game
Bejeweled - com.ea.ios.bejeweledskies
Block Puzzle -Game.BlockPuzzle
Classic Bejeweled - com.popcap.ios.Bej3
Classic Bejeweled HD -com.popcap.ios.Bej3HD
FlipTheGun - com.playgendary.flipgun
Fruit Ninja - com.halfbrick.FruitNinjaLite
Golfmasters - com.playgendary.sportmasterstwo
Letter Soup - com.candywriter.apollo7
Love Nikki - com.elex.nikki
My Emma - com.crazylabs.myemma
Plants vs. Zombies™ Heroes - com.ea.ios.pvzheroes
Pooking - Billiards City - com.pool.club.billiards.city
PUBG Mobile - com.tencent.ig
Tomb of the Mask - com.happymagenta.fromcore
Tomb of the Mask: Color - com.happymagenta.totm2
Total Party Kill - com.adventureislands.totalpartykill
Watermarbling - com.hydro.dipping

--Social Networking
TikTok - com.zhiliaoapp.musically
ToTalk - totalk.gofeiyu.com
Tok - com.SimpleDate.Tok
Truecaller - com.truesoftware.TrueCallerOther
Viber - com.viber
Weibo - com.sina.weibo
Zoos ...

The only one of those I've used with any frequency is The Weather network -- and even that I rarely ever use as the built-in weather is good enough.  So not using TWN isn't going to be a problem.


Dark Sky is a good weather app. It gives me an umbrella reminder in the morning of rain is expected and notifies before significant weather starts wherever I happen to be in the world at the time.
 
2020-07-03 11:10:18 PM  

BullBearMS: Esc7: Psychopusher: Quantumbunny: EasilyDistracted: Why would you copy your password to the Clipboard?  (Unless it means something different in IOS world that other Operating Systems.)

Password Managers are the best reason someone would do this. I'm assuming iOS autofill likely doesn't exist, or makes use of the clipboard. Not sure as I don't use iOS.

iOS' built-in password management uses a cloud-based keychain system.  Not sure how hard it is to snoop on, but it's built on the premise of security at any rate, so I don't expect it uses the clipboard with plaintext passwords.

But if you use a third party app password manager on iOS you're basically forced to use copy paste instead of iOS' secure password storage.

And you would use a third party manager if your personal ecosystem is heterogenous across PC, MacOS, Android, and iOS.

Nope.  The available API works with third party password managers too.


Well I'll be farked it's been enabled since ios12.

THANK YOU
 
2020-07-04 1:51:08 AM  
RedHead87:
Dark Sky is a good weather app.

Some bad news for Android users: Apple bought the company that made Dark Sky, and is shutting the Android app down in August.  Allegedly, they're refunding all of them, though.
 
Displayed 24 of 24 comments

View Voting Results: Smartest and Funniest

This thread is closed to new comments.

Continue Farking





On Twitter



  1. Links are submitted by members of the Fark community.

  2. When community members submit a link, they also write a custom headline for the story.

  3. Other Farkers comment on the links. This is the number of comments. Click here to read them.

  4. Click here to submit a link.