Over 400 of the World's Most Popular Websites Record Your Every Keystroke

[DamianTV]

https://yro.slashdot.org/story/17/11...very-keystroke

The idea of websites tracking users isn't new, but research from Princeton University released last week indicates that online tracking is far more invasive than most users understand. In the first installment of a series titled "No Boundaries," three researchers from Princeton's Center for Information Technology Policy (CITP) explain how third-party scripts that run on many of the world's most popular websites track your every keystroke and then send that information to a third-party server. Some highly-trafficked sites run software that records every time you click and every word you type. If you go to a website, begin to fill out a form, and then abandon it, every letter you entered in is still recorded, according to the researchers' findings. If you accidentally paste something into a form that was copied to your clipboard, it's also recorded. These scripts, or bits of code that websites run, are called "session replay" scripts. Session replay scripts are used by companies to gain insight into how their customers are using their sites and to identify confusing webpages. But the scripts don't just aggregate general statistics, they record and are capable of playing back individual browsing sessions. The scripts don't run on every page, but are often placed on pages where users input sensitive information, like passwords and medical conditions. Most troubling is that the information session replay scripts collect can't "reasonably be expected to be kept anonymous," according to the researchers.

[Brian4Liberty]

Pro tip: this is how they capture passwords. Use the same password on multiple websites? They will know that. Accidentally type in your Facebook password on Amazon? Amazon now has your Facebook password.

[DamianTV]

Pro tip: this is how they capture passwords. Use the same password on multiple websites? They will know that. Accidentally type in your Facebook password on Amazon? Amazon now has your Facebook password.

Its half the reason there is the push for biometrics. Of course, make something idiot proof and the world will build a better idiot.

[Suzanimal]

Pro tip: this is how they capture passwords. Use the same password on multiple websites? They will know that. Accidentally type in your Facebook password on Amazon? Amazon now has your Facebook password.

For real? I use the same password everywhere. I watched a Snowden video awhile back and he suggested using a phrase as a password. Something that would make sense to you but no one else. I tried that but by the time I worked in all the password requirements, my own phrase didn't even make sense to me.

I always use our street number for the numbers but my son uses 80085. It took me a minute to get it but I may have to steal that idea.

[specsaregood]

I tried that but by the time I worked in all the password requirements, my own phrase didn't even make sense to me.

That is one of my pet peeves, that all the password requirements/rules end up making passwords less safe as people end up having to write them down somewhere just to remember them. especially the stupid ones that cause them to expire regularly and not let you reuse old pwds.

[CaptUSA]

Pro tip: this is how they capture passwords. Use the same password on multiple websites? They will know that. Accidentally type in your Facebook password on Amazon? Amazon now has your Facebook password.

'nother pro tip: It evens happens on this site. Begin to type a message and you will see a little "Auto-Saved" box pop up on the bottom right. It'll continue to do that every once in a while as you type. It's one of the "features" of vBulletin.

EVERYTHING you do online is tracked and cataloged. Mostly, it is ever used for anything, but it's available. Just in case it is ever needed.

[Mach]

Here's a direct link to Princeton that you can scroll through the sites that have been found doing this.... SO FAR....

https://webtransparency.cs.princeton...lay_sites.html


Here is a keystroke encryption software that has a free version.

http://www.qfxsoftware.com/