EU government websites have undisclosed adtech trackers from Google and others

Re:EU government websites have undisclosed adtech trackers f... by jacquesm on Monday March 18, 2019 @06:06PM (#19425832)

You can't get at the $ but you can get at the individual transaction data. They really should not have third party js on banking and medical sites, especially not for logged in users.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by chopin on Monday March 18, 2019 @06:35PM (#19426052)

Are you absolutely sure about this (would love a reference)? Letting another party running code removes at least many layers of defence. I would not trust a bank which is doing that it's just a sign of gross incompetence.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by jacquesm on Tuesday March 19, 2019 @01:03AM (#19428205)

2FA should at least in theory stop them from doing that. But if the script rewrites the page then maybe there are interesting ways around that.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by nostoc on Monday March 18, 2019 @10:49PM (#19427656)

Third party code within your banking website has access to anything you can do from the UI.

That includes siphoning money from your account.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by jacquesm on Tuesday March 19, 2019 @01:04AM (#19428210)

I have a hardware token and a chipcard to stop that from happening, still, there may be some way to do it that I'm not aware of. One way I can think of is to display one set of destination details for a transfer to the user and use another for the actual transfer.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by chopin on Tuesday March 19, 2019 @03:05AM (#19428685)

The hardware token I use shows amount and recipient. At least you could notice.

[ Parent | on HN ]