Last updated March 16, 2020
–
–
–
Apple has given apps unrestricted access to the system clipboard (pasteboard) Pasteboard on a phone Iphone And the iPad computer, according to new research conducted by Talal Haj Bakry and Tommy Mysk, dozens of popular iOS applications secretly read the contents of the pasteboard, without user consent each time it opens, which can Include sensitive information.
People copy all kinds of information to the clipboard, a practice that has been going on for decades and deeply rooted, and although most of this information may be normal, there are times when a user copies important information, such as passwords, phone numbers, financial details, or credit card numbers.
Although reading the contents of the pasteboard without the user’s consent is in itself a reason to suspect, but what makes it more suspicious is that some applications, such as games, do not provide any user interface that deals with the text, yet they access the content of the pasteboard in every Once opened by the user.
It is noteworthy that applications that access the iOS or iPadOS pad can also read the information copied into the Mac device, if the user activates the Universal Clipboard option, and the researchers presented the problem to Apple at the beginning of the year But they were told it was not a problem.
Interestingly, (Talal Haj Bakri and Tommy Mesk) found that the applications can read any type of data copied to the pasteboard, and the applications that accessed the clipboard when they were running only requested texts, and ignored other data, such as pictures and documents.
Topics related to what you are reading now:
–
Researchers are keen to point out that they do not know what applications do with the content of the pasteboard, and the list of applications includes news, games and social networking applications, as well as more than ten varied applications, and the full list of about 50 applications can be accessed via Link.
The researchers published a video to demonstrate the concept explaining the clear vulnerability, and used (Xcode) and (Xcode Command line) to analyze the behavior of applications, and the list includes common applications such as (TikTok), (Accuweather), (Truecaller), (Overstock) and a wide range of applications News agencies.
–
–
