3 ms·

Call me thick and naive if you will, but how does an advert manage to hoover up all typed inputs on a page including (somehow accidentally) passwords. Isn't th

Call me thick and naive if you will, but how does an advert manage to hoover up all typed inputs on a page including (somehow accidentally) passwords. Isn't the underlying problem with the web browser that allows this, or are browsers just fundamentally broken when it comes to protecting users?

TeMPOraL 9y ago
Analytics analyze. They read data. Mixpanel decided to read more than they should, and they unintentionally slurped some passwords. The core technical problem is that scripts can read data. But that's kind of their job. "Solving" that would require to reduce the functionality of webpages. The core social problem is that people include third-party analytics and advertisements. Solving that would require to destroy the entire adtech industry. I'm all for the latter solution.
- bluesign 9y ago
  Where you will draw the line, then main ad industries will start to serve ads as 1st party as custom subdomains. There is no way to win this fight except regulations and oversight
  - TeMPOraL 9y ago
    Yes, I strongly agree. That's why I can't wait for GDPR to come to life this May.
  - chopin 9y ago
    In this case, they can be made fully responsible. You'd better vet the Javascript you're going to deliver.