insecure clipboard iOS 9.2

Question

Level 1

16 points

insecure clipboard iOS 9.2

So I launch Facebook on my iPhone 6S 64GB and at the top of the feed it asks what's on my mind AND pre-populates the field with the URL that earlier I'd copy-pasted from an e-mail to some place else.

What was it?

A tracking URL for a package to be delivered at my place tomorrow.

Great.

No reason to suppose that, having pre-populated, FB didn't somehow bounce it to its server and scan the content of the page: so Facebook now knows where I live. ***...!!!

Apple: apps should not be able to access your clipboard until you PASTE.

The information might not be for them.

iPhone 6s, iOS 9.2, 64GB

Posted on Dec 8, 2015 12:38 PM

Reply

Answer 1

Dec 8, 2015 1:29 PM in response to RupertC

This is a known issue with the Facebook app... been like this for a few months.

It's said to be helpful for those who like to share links and such from their phone.

Also, standard shipping services don't provide address details in their tracking URL's, nothing to worry about there.

Submit feedback to the FB app developer team accordingly.

Reply

Answer 2

GCSS-MC

Level 1

38 points

Dec 8, 2015 1:43 PM in response to RupertC

I submitted a feedback to Apple to make clipboard contents secure. That is, not accessible to Apps.

http://www.apple.com/feedback/iphone.html

Reply

Answer 3

Dec 8, 2015 6:05 PM in response to GCSS-MC

GCSS-MC wrote:

I submitted a feedback to Apple to make clipboard contents secure. That is, not accessible to Apps.

That would make the clipboard pretty useless.

Reply

Answer 4

Dec 8, 2015 6:11 PM in response to RupertC

No reason to suppose that, having pre-populated, FB didn't somehow bounce it to its server and scan the content of the page: so Facebook now knows where I live. ***...!!!

Facebook already knows where you live, who you know, and a lot of other information that you may not have thought about. If you are concerned with personal privacy you shouldn't be using Facebook at all.

Reply

Answer 5

RupertC Author

Level 1

16 points

Dec 8, 2015 9:55 PM in response to RupertC

Thanks everyone.

I too have submitted feedback: this is best done as a team effort.

Of course this doesn't just apply to Facebook and Delivery Services but any app that you might open just after you've been copy/pasting your Banking Details!

Note that the clipboard does not have to be inaccessible to apps, but only accessible at the moment of a deliberate PASTE.

Reply