Advertisement

THIS website reveals how TikTok, Instagram may track your data

He earlier warned that the Chinese short-form video app TikTok may be monitoring all keyboard inputs and taps via its in-app browser on iOS. "TikTok's In-App Browser injecting code to observe all taps and keyboard inputs, which can include passwords and credit cards," he warned.

THIS website reveals how TikTok, Instagram may track your data File Photo

New Delhi: As the debate grows about tech companies and apps tracking your data, here comes a website that can reveal how platforms like TikTok and Instagram may potentially see your sensitive data, including address, passwords, and credit card information, without your consent. The website, named InAppBrowser.com, has a tool that will let you know how popular social media platforms are injecting "JavaScript code into third-party websites that cause potential security and privacy risks to the user".

According to the tool's developer, Felix Krause, InAppBrowser.com has a simple tool to "list the JavaScript commands executed by the iOS app rendering the page". "To try this tool yourself, open an app you want to analyse, share the URL, tap on the link inside the app to open it, and then read the report on the screen," he mentioned. (Also Read: China-backed hackers spying on govts, India's NIC among victims)

InAppBrowser.com is designed for everybody to verify for themselves what apps are doing inside their in-app browsers. "I have decided to open source the code used for this analysis, you can check it out on GitHub. This allows the community to update and improve this script over time," Krause said in a blog post. (Also Read: Microsoft reveals why playing Janet Jackson's mega-hit song crashes laptops)

He earlier warned that the Chinese short-form video app TikTok may be monitoring all keyboard inputs and taps via its in-app browser on iOS. "TikTok's In-App Browser injecting code to observe all taps and keyboard inputs, which can include passwords and credit cards," he warned.

TikTok said in a statement that Krause's conclusions about the company are "incorrect and misleading". "Contrary to its claims, we do not collect keystroke or text inputs through this code, which is solely used for debugging, troubleshooting, and performance monitoring," the company said.