Safari on iOS could send tracking data to China

Safari on iOS could send tracking data to China

Apple's Safari browser has sent user data to Google Safe Browsing to protect users from phishing, but now it appears the browser is also sending data to China's tech giant Tencent.

Reviewing the scam fraud warning on the Safari website, users discovered that iOS 13 (and possibly other versions of iOS since 12.2) sent data to Tencent Safe Browsing in addition to Google.

At this time, it is unclear if Tencent collects information about users located outside of China. However, in its disclaimer, Safari informs users that their data is sent to the company to protect them from visiting fraudulent websites, including:

"Before visiting a website, Safari may send the information calculated from the website address to Google Safe Browsing and Tencent Safe Browsing to check whether the website is fraudulent. These safe browsing providers may also log your IP address."

Secure browsing

If sending browser data to a company to help users avoid fraudulent websites and phishing attempts isn't new, some worry that Tencent might make the data it receives.

Google and Tencent have the ability to log users' IP addresses to run their anti-phishing systems, but since Tencent frequently cooperates with the Chinese government, concerns have been raised about how the data could be used for surveillance purposes. or for other harmful purposes.

According to Matthew Green, a professor at Johns Hopkins University, a malicious vendor could theoretically use Google Safe Browsing to remove someone's anonymity by linking site requests. If Tencent uses a similar method, the data collected could be used to identify users if the Chinese government was pressuring the company to reveal dissidents.

To prevent the collection of unwanted data by Safari, you can disable the website's scam warning feature (which is turned on by Apple by default), but you risk becoming a victim even more. a fraud. If Tencent is more concerned about getting access to your data, it might be better to use a different, more privacy-focused browser.

ViaEngadget