9 ms·
The article is really vague. Extraordinary claims should come with extraordinary evidence. That said, could it be that the ad has its own JavaScript that does i
by superjan 3y ago
The article is really vague. Extraordinary claims should come with extraordinary evidence. That said, could it be that the ad has its own JavaScript that does its spying for the time it is visible on the page? Can adds do that?
- hn_throwaway_99 3y agoEven then, that would be a vulnerability in the browser. JavaScript in ads is loaded in its own context and doesn't have permission to access things outside of that context.
- beebeepka 3y agoThat would depend on how the ad is being served, no?
- hn_throwaway_99 3y agoNot really. Ads are basically always served in an iframe precisely so it can't access content in the parent page. Even if worse came to worst and there was a bug on the parent page that let the ad JS access its parent page context, it should still be sandboxed to just that page.