Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I applaud Apple for making this known but I wonder why this wasn't a privacy option to enable or disable like location services all along? Also, why just add a notification without the ability to deny access?

Edit: I rescind my applause after reading @Wildkraut post #228, apparently Apple has known this could be a problem for many years and is just now throwing out a half hearted notification instead of a fix. SMH, this should never have been allowed.
 
Last edited:
  • Like
Reactions: temptee
There should honestly be an investigation into why Tiktok was grabbing the clipboard. Its obvious they were spying, potentially credential harvesting for the mothership. I've never heard of that being used for anti-spam.
 
  • Like
Reactions: icanhazmac
There should honestly be an investigation into why Tiktok was grabbing the clipboard. Its obvious they were spying, potentially credential harvesting for the mothership. I've never heard of that being used for anti-spam.
There are many Apps doing this, TikTok is just one of them


Btw. i don't think in other Operating Systems this is handled much different. e.g. Windows., macOS, etc.
The clipboard should never been build that way.
 
Last edited:
  • Like
Reactions: temptee
AFAIK almost every Chinese app does that, Weibo, WeChat, TikTok, Taobao... It's really great iOS has all those features.

On the other hand, Android users in China have to bear all the privacy issues all the time. Some apps even ask for permission to monitor user's phone call and texts. What if someone chooses not to give those apps the permissions? THEY STOP WORKING AND QUIT! That's insane!
In China that’s not the worst consequence. The worst case scenario is when The Party pays you a visit and you’re taken away for “re-education through labor” when you crimethink
 
Yes! Currently it‘s harder to find an app not checking your clipboard. Nearly every major app does it.


Apps currently spying:
News
• ABC News
• Al Jazeera English
• CBC News
• CBS News
• CNBC
• Fox News
• News Break
• New York Times
• NPR
• ntv Nachrichten
• Reuters
• Russia Today
• Stern Nachrichten
• The Economist
• The Huffington Post
• The Wall Street Journal
• Vice News
Games
• 8 Ball Pool™
• AMAZE!!!
• Bejeweled
• Block Puzzle
• Classic Bejeweled
• Classic Bejeweled HD
• FlipTheGun
• Fruit Ninja
• Golfmasters
• Letter Soup
• Love Nikki
• My Emma
• Plants vs. Zombies™ Heroes
• Pooking – Billiards City
• PUBG Mobile
• Tomb of the Mask
• Tomb of the Mask: Color
• Total Party Kill
• Watermarbling
Social Networking
• TikTok
• ToTalk
• Tok
• Truecaller
• Viber
• Weibo
• Zoosk
Other
• 10% Happier: Meditation
• 5-0 Radio Police Scanner
• Accuweather
• AliExpress Shopping App
• Bed Bath & Beyond
• Dazn
• Hotels.com
• Hotel Tonight
• Overstock
• Pigment – Adult Coloring Book
• Recolor Coloring Book to Color
• Sky Ticket
• The Weather Network

While Chrome for iOS might well be doing something nefarious with the paste contents, it also provides the genuinely convenient feature of letting you go straight to a URL if you had one in your clipboard, rather than having to manually paste it and go. It's minor, but it's also something that I use fairly often.
 
I have noticed this behavior in some MacOS applications. I open the application and in a text field (find, or example) it displays text that I previously copied in a different application. It is very disconcerting.
 
While Chrome for iOS might well be doing something nefarious with the paste contents, it also provides the genuinely convenient feature of letting you go straight to a URL if you had one in your clipboard, rather than having to manually paste it and go. It's minor, but it's also something that I use fairly often.

Sure, and Deliveries uses it to automatically add a tracking number in your clipboard. There are plenty of legitimately good uses for the feature.

The point is a whole ton of apps are doing it without users knowing, or having any way to prevent it. And like with iOS13 we learned a whole lot of apps were accessing bluetooth without us knowing why, now on iOS14 we learned that a whole lot of apps are accessing the clipboard without us knowing why.
 
While Chrome for iOS might well be doing something nefarious with the paste contents, it also provides the genuinely convenient feature of letting you go straight to a URL if you had one in your clipboard, rather than having to manually paste it and go. It's minor, but it's also something that I use fairly often.

While I recognize the convenience this functionality has clearly been abused and is now problematic, I will gladly manually paste if it means a locked down clipboard. At the very least we should have a secure side to the clipboard that clears itself after a paste, such as a 1password copy/paste scenario.
 
I love all the comments how TikTok is the devil from China that is exposing your privacy, you do know that privacy breaching and data collecting was an American business invention and Google and Facebook are the grand masters of it, yes the TRILLION dollar companies that you do not pay anything for their services.

Seriously, YouTube, FB, Amazon Alexa, Gmail, they are not really any better.

This is also the mistake of the OS, why are you giving access to my clips boards, bookmarks, browsing history, voice recordings...etc etc. An app should access only what I wish for it to access. It takes only the input I give it to, the only picture I submit, the only text I write, the only voice recording I shared. Not my whole photo library, my keystrokes, and a microphone that is on 24/7.

If there were ever an app that needed to be booted from the app store for compromising user privacy, it's Tiktok. It's too bad it's gotten too popular and Apple can no longer give it the boot without massive backlash.

Tiktok is basically a ripoff of Vine. Why the HELL didn't Vine catch on, but Tiktok did? Sigh.

you can't be serious, At least with TikTok if you wish not to use it you are safe. Google and FB follows you around the web, via videos, messages, email, maps, ads, searches...their business model is literally record your life and sell you ads based on your personality and habits. I heard one time a lady got ads based on her monthly period timing, they know when her period is coming!
 
  • Like
Reactions: lysingur
One question I have is why do apps have access to the clipboard AT ALL?

Shouldn't the clipboard only be used when you PASTE something? It seems absurd that there'd be an API for an app to grab the clipboard contents without permission, and yet apparently it's been the case all along.
So you can COPY from one app, and then PASTE what you copied into another app. Exactly how the clipboard works in a normal computer, like say, a MBP, or a PC. Only the walled garden would think this is a bad thing.
 
Like I said, naive.
Just because you’re lazy doesn’t mean everyone is.

And in case you haven’t noticed, they themself said it’s “the feature” for spam protection lol.
This is probably how it went down: Leader wanted to cut down on spam. Devs said hey, a lot of spam is people copy-pasting text. It'll be easy to just check for that, and nobody will care.

It's really not a bad idea. And if you think I'm lazier than them, at least I bother setting up HTTPS.
 
Last edited:
  • Haha
Reactions: temptee
Keeping your passwords on Notes is a really bad idea. I highly recommend a password manager if you're worried about keeping yourself safe online.

I know it’s a bad idea and I shouldn’t do it but it’s really convenient (and I guess that‘s what many people (normal users) do). Much easier to search than in iCloud Key Chain. And you can have passwords of other people in your family in there as well, in case of some emergency, unlike in password apps. Plus, Notes can be password protected.
 
Last edited:
It might be ok that you can’t justify paying premium for a tangible product that you can’t afford and think it’s financially wise to get a Chinese ripoff instead. It’s not ok with software.
Oh please, lots of US software is trash too.
 
"TikTok is committed to protecting users' privacy and being transparent about how our app works."

"Now. I mean, we said that before, but it was a lie. But NOW we mean it. Really. Don't believe the last lie, believe this lie. Er, truth."
 
  • Like
Reactions: temptee
So you can COPY from one app, and then PASTE what you copied into another app. Exactly how the clipboard works in a normal computer, like say, a MBP, or a PC. Only the walled garden would think this is a bad thing.

No, that's not what I'm talking about.

Yes, you can COPY from one app and PASTE into another, but typically YOU are the one doing the pasting. On a Mac you'd hit cmd-V or Edit -> Paste. On iOS you'd hold your finger to the text field and hit paste.

What's happening here (and what I feel shouldn't be possible) is app code peeking at the clipboard without the user initiating a paste operation. That sounds like a serious security hole, especially since users sometimes copy & paste passwords.
 
I know it’s a bad idea and I shouldn’t do it but it’s really convenient (and I guess that‘s what many people (normal users) do). Much easier to search than in iCloud Key Chain. And you can have passwords of other people in your family in there as well, in case of some emergency, unlike in password apps. Plus, Notes can be password protected.
AFAIK, You can share your passwords in 1Password and LastPass and once stored in iCloud Keychain, iOS is able to autofill passwords on websites and apps.
 
In China that’s not the worst consequence. The worst case scenario is when The Party pays you a visit and you’re taken away for “re-education through labor” when you crimethink
Or more likely "re-education" through forcible organ extraction and burial of your corpse (dissident problem 'resolved'!). The Chinese government is monstrous in its treatment of the Chinese people.
 
  • Like
Reactions: temptee
Keeping your passwords on Notes is a really bad idea. I highly recommend a password manager if you're worried about keeping yourself safe online.
Hi. what do you think of an encrypted note in Notes? I mean you unlock the note by entering its password, copy the password you are looking for and lock back the note, and then pzste thé copied password where you wish. Not safer ? Any different from 1 Password ?
 
up until now, it's been allowed to happen.

Something that can be said about almost anything ever.
[automerge]1593248576[/automerge]
Hi. what do you think of an encrypted note in Notes? I mean you unlock the note by entering its password, copy the password you are looking for and lock back the note, and then pzste thé copied password where you wish. Not safer ? Any different from 1 Password ?

It's not going to be encrypted. If an app can Paste then it can get the unencrypted clipboard contents.
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.