untitled design

Popular sites read the text you enter before sending it. Yandex collected passwords

Researchers from the KU Leuven, the University of Nijmegen and the University of Lausanne analyzed 100,000 of the most popular sites and found that some of them collect the email address entered by the user even before he sends it – if a person changes his mind at the last moment, then his email is still will already be in the database of third parties. It is reported by WIRED.

For more than a year, experts have been researching sites targeted at residents of the European Union and the United States. It turned out that among them, 1,844 portals for the EU and 2,950 resources for the United States of America use this trick. The developers of most of these sites seem to be doing this unintentionally, using third-party marketing and analytics services that instigate such activity.

Top 10 sites (second columns) for the EU and US that share email addresses with third-party services (third columns)

Third parties need this information in order to understand which sites the user visits and better tailor ads to them.

The researchers also specifically analyzed sites for a similar collection of entered passwords. They ended up finding this on 52 sites where third-party services (including Yandex) were “accidentally collecting passwords” even before they were sent by users. Having identified these violations, the experts sent a report to the fixed sites – subsequently, all 52 cases were eliminated.

Detailed results of the study will be published in August at the Esenix conference, but some in-depth information is already known. For example, some sites are reported to act as keyloggers—reading each character you type as soon as you press a key. However, most save information only after the user leaves the current input field (or moves on to the next one).

Source: Trash Box

You may also like

Get the latest

Stay Informed: Get the Latest Updates and Insights

 

Most popular