securitybreach Posted May 15, 2022 Share Posted May 15, 2022 Quote When you sign up for a newsletter, make a hotel reservation, or check out online, you probably take for granted that if you mistype your email address three times or change your mind and X out of the page, it doesn't matter. Nothing actually happens until you hit the Submit button, right? Well, maybe not. As with so many assumptions about the web, this isn't always the case, according to new research: A surprising number of websites are collecting some or all of your data as you type it into a digital form. Researchers from KU Leuven, Radboud University, and University of Lausanne crawled and analyzed the top 100,000 websites, looking at scenarios in which a user is visiting a site while in the European Union and visiting a site from the United States. They found that 1,844 websites gathered an EU user's email address without their consent, and a staggering 2,950 logged a US user's email in some form. Many of the sites seemingly do not intend to conduct the data-logging but incorporate third-party marketing and analytics services that cause the behavior. After specifically crawling sites for password leaks in May 2021, the researchers also found 52 websites in which third parties, including the Russian tech giant Yandex, were incidentally collecting password data before submission. The group disclosed their findings to these sites, and all 52 instances have since been resolved. “If there’s a Submit button on a form, the reasonable expectation is that it does something—that it will submit your data when you click it,” says Güneş Acar, a professor and researcher in Radboud University's digital security group and one of the leaders of the study. “We were super surprised by these results. We thought maybe we were going to find a few hundred websites where your email is collected before you submit, but this exceeded our expectations by far.”.......... https://www.wired.com/story/leaky-forms-keyloggers-meta-tiktok-pixel-study/ 1 1 Quote Link to comment Share on other sites More sharing options...
V.T. Eric Layton Posted May 15, 2022 Share Posted May 15, 2022 Hmm... sadly, I'm not at all surprised. 4 Quote Link to comment Share on other sites More sharing options...
securitybreach Posted May 15, 2022 Author Share Posted May 15, 2022 Same Quote Link to comment Share on other sites More sharing options...
crp Posted May 23, 2022 Share Posted May 23, 2022 less than 3% , and i would like to know the definition of "logged in some form". Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.