3 ms·
Is there a risk of information leakage? Say for example a website asks me for something (e.g. an address, phone number, bank account number), I type it in (thu
by djhworld 9y ago
Is there a risk of information leakage?
Say for example a website asks me for something (e.g. an address, phone number, bank account number), I type it in (thus registering my keystroke presses to the keylogger) and then realise oops I didn't mean to type that, I meant to type something else
Does the website then submit the logged keystrokes for offline analysis?
- plif 9y agoYes, theoretically in the case you mentioned. All responsible implementations of this won't actually log PII. It's pretty trivial to withhold certain inputs. All of the services mentioned in the article have easy ways to flag an input field as private / do not log. I'd wager a lot of money that these sites are interested in gathering UX data and not scraping for accidental form input. I suppose there's a certain level of trust involved, but I don't think that's any different than when you make an online purchase. /shrug