Re:Hundreds of web firms record 'every keystroke'
by Brotkrumen on Wednesday November 29, 2017 @09:02AM
(#15806799)
No. There's too many parties involved I'd have to trust to a) want to keep my data save and b) don't mess up. And even if both are true, I have to accept yet another way with several points of failure where bad agent could exfiltrate my data.
[ Parent
| on HN ]
Re:Hundreds of web firms record 'every keystroke'
by PJDK on Wednesday November 29, 2017 @10:02AM
(#15807257)
But this is being run by a party you trust with that data in the first place surely?
It's capturing the things you are typing into the website's input boxes!
Re:Hundreds of web firms record 'every keystroke'
by orwin on Wednesday November 29, 2017 @11:00AM
(#15807788)
We trust the website we give our information to. It is https-based (else my browser will tell me) and probably using an ORM that will 99% of the time hash my password. But the javascript layer...
Sorry, call me paranoiac, but i will never trust the javascript of a website. With no webdev experience, i was able to inject js (almost by mistake) three years ago. Moreover, is the js communicating with the backend using https too? How can i check that? Are those js library on the website server, or are they hosted by a third party? I can trust them, but how do i know that no attacker was able to modify those scripts? Yes, those risks are small, but i'd rather have ublock making those risks closer tho 0 than not, am i wrong?