Websites that Collect Your Data as You TypeFrom: MinerNewsgroups:
Mon, 11 Jul 2022 13:28 UTC
View all headers
that collect everything you type as you type it, not just when
you submit a form.
Researchers from KU Leuven, Radboud University, and University of
Lausanne crawled and analyzed the top 100,000 websites, looking
at scenarios in which a user is visiting a site while in the
European Union and visiting a site from the United States. They
found that 1,844 websites gathered an EU user's email address
without their consent, and a staggering 2,950 logged a US user's
email in some form. Many of the sites seemingly do not intend to
conduct the data-logging but incorporate third-party marketing
and analytics services that cause the behavior.
After specifically crawling sites for password leaks in May 2021,
the researchers also found 52 websites in which third parties,
including the Russian tech giant Yandex, were incidentally
collecting password data before submission. The group disclosed
their findings to these sites, and all 52 instances have since
"If there's a Submit button on a form, the reasonable expectation
is that it does something-that it will submit your data when you
click it," says Guenes Acar, a professor and researcher in
Radboud University's digital security group and one of the
leaders of the study. "We were super surprised by these results.
We thought maybe we were going to find a few hundred websites
where your email is collected before you submit, but this
exceeded our expectations by far."