1013
Heads up. Facebook keylogs your passwords.
(midwest.social)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 04 Jan 2024
1013 points (94.9% liked)
Privacy
31255 readers
1313 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 4 years ago
MODERATORS
All this to say you’re fine with TikTok grabbing your passwords? Because you don’t want to be xenophobic? Weird line but you do you.
Can you tell me how TikTok is grabbing your passwords without an account, and outside of their app or website? I need an account for Facebook/Instagram, not TikTok.
Do you understand the difference between needing an account versus not needing one for a service? It is wider than the Grand Canyon. That is why I provided those links, and that is why it is critical to note the lack of personal identifier data grabbing with not needing an account. With one, you give phone number, contact book, IMEI, location data, email, some name or pseudonym et al. With the other, none.
Edit: since you have poked the bear, I will growl.
Facebook/Instagram data collection on a user is more than a TikTok user, even if there is an account on both services. On top of this, TikTok does not have tracking pixels, ad networks, CDN and other methods of tracking on other websites, unlike Facebook ecosystem. This allows Facebook ecosystem to correlate, interlink and form data clusters on users and IP addresses. Remember how Facebook ecosystem disallows accountless access? Or how they C&D'd Barinsta developer Austin Huang, citing they dislike anonymous access to Instagram?
This is precisely what makes TikTok objectively so harmless without an account, and even with an account, relatively far less harmful. It does not mean TikTok does not collect data, but the difference is too wide. These are the facts.
And your petty downvote makes it seem like this is too much to swallow.
Tiktok is Chinese spyware.
Facebook is American spyware.
Stop using them!
End of story.
When you grow older, you start to see 2+2 is always not 4. It can be 3 or 5 too.
I'll bet I'm older than you.
Its pretty obvious isn't it?
Old people are also immature, and age is not a determinant of maturity and intelligence. One who deals with things by putting them in boxes in their head, is never a person worthy of listening to.
Ok Junior.
Mhm, using teenager tactics like gaslighting? You know that is not a very nice netiquette, right? Thought Reddit and 4chan behaviours would be a thing of the past on Lemmy.
This has nothing to do with being logged into TikTok. This is a link within the TikTok app keylogging credentials as they are entered.
And for the record, “logged in” isn’t the same as “identified”. Browser and device fingerprinting is very much a thing, and is quite scary in how well it works.
If you don’t think TikTok has CDNs (or that CDNs are used primarily for tracking?), it makes it clear you don’t actually know what you’re talking about.
It’s clear you either don’t know, or are being disingenuous about, the dangers of a bad actor in current technology. Especially when most of your argument is “you don’t even need to log in, it’s just so safe!”
You use the word "disingenuous", while not realising your own argument is just that, fully ignoring what I said about TikTok not needing its own app to browse, besides not requiring an account either.
Fingerprinting of browser is far, FAR, FAR more vague than someone installing an app, giving all invasive permissions, giving out phone number, email, name, IMEI, location data and a bunch of other identifiers.
You are dying on the wrong hill, even if you win this little popularity voting contest, because you are objectively incorrect.
“You don’t have to use the app, so it’s not bad that they can key log your info when using it.”
Come the fuck on, there’s no way you’re a real person.
You cannot tell me that
A) one service needs you to use the app and keylogs you, and you cannot easily avoid it even on other websites
B) one service that does not need you to use the app, only keylogs on the app, and does not employ this crap via other websites
in the above cases, A and B scenarios are same. No, they are not. Yes, keylogging is bad. But, one of them allows you to avoid it. And you are fucked with the service in scenario A if you must need it.
You’re still not understanding what is being talked about.
Here is the situation being talked about:
At no point is anyone claiming it’s unavoidable, or spread on countless websites. It’s the app that’s the issue, it’s the app that doing the keylogging.
Someone shared they are pushing malware JS via https://netseer-ipaddr-assoc.xy.fbcdn.net, so one of them is incomparably horrific.
If I am opening TikTok in a browser, I do not have much to worry about. It can keylog what I search for or comment in TikTok, nothing else. And this is in-app, NOT if Tiktok is used in-browser. On the other hand, I have to block off Facebook domains on system HOSTS level to keep myself safe from malware.
You are wanting to put TikTok in an isolated perspective, while I am pitting it against Facebook, since it is about JS/in-app keylogging tactics, and I am discussing the scope of both services.