Please disable your adblock and script blockers to view this page

Some Top 100,000 Websites Collect Everything You Type?Before You Hit Submit


Profile
Radboud University
University of Lausanne
the European Union
EU
Yandex
Radboud University's
Gizmodo
KU Leuven
General Data Protection Regulation
Facebook
TikTok Pixel
Firefox
Condé Nast
Affiliate Partnerships


Lily Hay NewmanTo
KU Leuven
Güneş Acar
Asuman Senol
WIRED
Covid


Russian

No matching tags


California Privacy Rights.


the United States
US

No matching tags

Positivity     37.00%   
   Negativity   63.00%
The New York Times
SOURCE: https://www.wired.com/story/leaky-forms-keyloggers-meta-tiktok-pixel-study/
Write a review: Wired
Summary

As with so many assumptions about the web, this isn't always the case, according to new research: A surprising number of websites are collecting some or all of your data as you type it into a digital form.Researchers from KU Leuven, Radboud University, and University of Lausanne crawled and analyzed the top 100,000 websites, looking at scenarios in which a user is visiting a site while in the European Union and visiting a site from the United States. Some sites logged data keystroke by keystroke, but many grabbed complete submissions from one field when users clicked to the next.“In some cases, when you click the next field, they collect the previous one, like you click the password field and they collect the email, or you just click anywhere and they collect all the information immediately," says Asuman Senol, a privacy and identity researcher at KU Leuven and one of the study coauthors. It's a very powerful identifier.”Acar also points out that, as tech companies look to phase out cookie-based tracking in a nod to privacy concerns, marketers and other analysts will rely more and more heavily on static IDs like phone numbers and email addresses.Since the findings indicate that deleting data in a form before submitting it may not be enough to protect yourself from all collection, the researchers created a Firefox extension called LeakInspector to detect rogue form collection.

As said here by Wired