App failure: researcher finds privacy loopholes in TikTok, Facebook and Instagram

Researcher Felix Krause, an expert in application privacy, revealed that Instagram, Facebook and TikTok they can track everything that is done on any website opened via “in-app browser” – that is, in internal browsers. This includes links opened within the social network application, such as the link in the bio or a link in the story. 

“This causes several risks for the user, with the application being able to track all interactions with external websites, from all form entries such as passwords and addresses, to every tap”, explains Krause in the report published on his own website. (Krause Fx*)

As the links are opened within the application, the social network is able to access the information without the user's consent. It is worth remembering that, worldwide, there are more than a billion active users on Instagram.

Can apps see everything I do on the internet? How can I protect myself?

The answer is no. Networks can only gain access when you open a link or advertisement within the application. Therefore, the researcher recommends that users copy the link and open it in their preferred browser, such as Google Chrome or Safari.

Have my passwords, address and credit card details been stolen by apps?

The answer is also no. “I haven't proven the exact data that Instagram is tracking, but I wanted to show you the kind of data they could obtain without you knowing. As shown in the past, if it is possible for a company to access data legally and for free, without asking the user for permission, they will track it,” says Krause. 

TikTok refutes accusations

After the publication of a second report on the subject, in which Krause addresses the situation on TikTok, the social network sent out a statement. 

“Like other platforms, we use an in-app browser to provide an optimal user experience, but the Javascript code in question is only used for debugging, troubleshooting, and monitoring the performance of that experience – such as checking how fast a page is running. loaded or if it crashes,” said spokeswoman Maureen Shanahan.