Given the rabble-rousing being done by right-wing US politicians around its Chinese links, the last thing TikTok needs is another privacy controversy.
That’s what it’s getting though, after security researcher Felix Krause investigated the in-app browser used by TikTok’s iOS app when people tap on external links.
“TikTok iOS subscribes to every keystroke (text inputs) happening on third party websites rendered inside the TikTok app,” reported Krause. “This can include passwords, credit card information and other sensitive user data.”
TikTok has since responded to the findings, telling Forbes that “Like other platforms, we use an in-app browser to provide an optimal user experience, but the Javascript code in question is used only for debugging, troubleshooting and performance monitoring of that experience — like checking how quickly a page loads or whether it crashes”.
That may be the case, but expect some more rabble-rousing as a result: something TikTok could have done without.