I really saw mouse movement and url typing, even though it was only a few seconds.
I raised the issue with them back in July 2013, but was initially brushed off. A couple more aggressive emails and they finally responded after 2 weeks saying the issue had been solved.
Haven't had problems since, but still wary..
Re:BrowserStack was hacked
by geographomics on Sunday November 09, 2014 @09:47PM
(#8581810)
Sorry I didn't mean to sound like I was doubting your account, was intended as a confirmation of your sightings!
It's just as probable that I connected in while the users were idling.
No worries!
Just pointing out the fact that they didn't seem too worried about the issue when first notified, and I really had to press to get some attention.
Pity I wasn't fast on a screen capture!
Also the VMs aren't locked down as tightly as they ought to be, last time I poked around in the Windows ones there were a few folders left writeable that shouldn't have been, ones with executables and scripts in used to control it.
That said, their service is so very useful that I continued using them anyway. My use case is just to occasionally check some public-facing websites are rendering properly on various browsers, so no big deal if someone snoops on that.