I
% Some Websites Could Leak Your Data Even Before You Submit It GA
S
REGULAR Menu Lifewire Tech for Humans Newsletter! Search Close GO News > Internet & Security
visibility
427 views
thumb_up
48 likes
C
Ledford has been writing, editing, and fact-checking tech stories since 1994. Her work has appeared in Computerworld, PC Magazine, Information Today, and many others. lifewire's fact checking process Tweet Share Email Tweet Share Email Internet & Security Mobile Phones Internet & Security Computers & Tablets Smart Life Home Theater & Entertainment Software & Apps Social Media Streaming Gaming Researchers found thousands of the top websites capturing and sharing form data even before users pressed the Submit button.The collection isn’t always for advertising purposes, suggest privacy experts.Many websites owned up and corrected the mistakes, but several still defy the rules.
thumb_up
31 likes
S
Donald Ian Smith / Getty Images Websites are getting craftier at collecting and sharing your information. An extensive study into the top 100,000 websites revealed that many leaked information people entered in the site forms to third-party trackers before people even pressed the submit button. It found thousands of such websites that leaked everything from email addresses to passwords, though thankfully, many fixed the issues once the researchers contacted them.
thumb_up
46 likes
S
"It is concerning to see websites leaking passwords," Rick McElroy, Principal Cybersecurity Strategist at VMware, told Lifewire over email, reacting to the research. "I am happy to see that once notified, the organizations made changes to their code to stop that practice."
Enter to Leak
The study was conducted to determine whether online trackers misuse access to web forms.
thumb_up
23 likes
A
The researchers point to a survey where 81% of the respondents admitted to abandoning online forms at some point. "We believe it is strongly against users' expectations to collect personal data from web forms for tracking purposes prior to submitting a form," noted the researchers. "We wanted to measure this behavior to assess its prevalence." Prasit Photo / Getty Images In all, they tested 2.8 million pages on the world's highest-ranking sites.
thumb_up
16 likes
I
Of these, 1,844 websites allowed trackers to exfiltrate email addresses before submission, when visited from Europe. When visited from the US, the number of sites collecting information before submission increased to 2,950. The researchers note that the data leaks were apparently unintentional in some instances, with incidental password collection on 52 websites being resolved thanks to the study's findings.
thumb_up
25 likes
K
"Some websites told us that they were not aware of this data collection and rectified the issue upon our disclosures," wrote the researchers, who will present their findings at the upcoming USENIX Security Symposium, in Boston, Massachusetts.
Stay Safe
Chris Hauk, consumer privacy champion at Pixel Privacy, said that while the data leaks are coming from the websites, there are a couple of things people can do on their end to at least slow the data leaks.
thumb_up
50 likes
S
"Users can visit Electronic Frontier Foundation's Cover Your Tracks website to determine how website trackers see your browser, revealing how sites can track you while online, and what you can do to at least partially prevent it,” Hauk suggested to Lifewire over email. Personal data and its value form the business model for many modern digital enterprises for the past 20+ years... The usual advice of using a VPN to cover your online tracks won’t be of much use to prevent this sort of leak.
thumb_up
12 likes
N
Hauk suggests using a disposable email address, separate from your usual personal email account, for use on websites that ask for such information. McElroy asked people to either use a web browser built for privacy like Brave, or to install privacy add-ons, such as Privacy Badger, on their regular browser.
thumb_up
17 likes
J
He also advocated for multi-factor authentication to minimize the damage of password leaks. Additionally, the researchers have developed a proof-of-concept browser add-on called Leak Inspector that warns and protects against data exfiltration.
thumb_up
7 likes
H
Data Economy
Expressing his surprise at the extent of the collection, McElroy said people must understand that human-generated data is a commodity that'll be collected, shared, analyzed, and used for multiple purposes. "Most of the time these purposes aren't necessarily malicious (like sharing data with a third-party advertiser) however the flow between and amongst systems with various levels of security makes all consumers vulnerable and creates a ripe landscape for attackers to take advantage of," explained McElroy. David Rickard, CTO North America at Cipher, a Prosegur company, thinks that people should presume that every form they fill out on the internet is saving data while data entry is underway, and every form they fill out becomes the property of the website and re-sold to third-parties.
thumb_up
2 likes
V
"Personal data and its value form the business model for many modern digital enterprises for the past 20+ years, even if their privacy policies explicitly state that they don't gather PII [Personally Identifiable Information] and sell it," Rickard told Lifewire over email. He said data aggregators work around privacy regulations by collecting several different datasets that may not include name, address, etc., which aren't PII as such, but when matched against hundreds of additional data points from other datasets, can identify individuals with a success rate of over 90%. "This gives rise to services that are something like actuarial tables (or believed to actually be actuarial tables) indicating credit worthiness, insurability, employability, likelihood of different addictions, likely political and religious affiliations, you name it," said Rickard.
thumb_up
30 likes
I
Get the Latest Tech News Delivered Every Day
Subscribe Tell us why! Other Not enough details Hard to understand Submit More from Lifewire Why Incognito Mode May Not Be Private and What You Can Do About It How to Upload a Podcast to Spotify How to Remove Your Information From the Web Create a 'Mailto' Email Form in Dreamweaver How to Send a Form via Email How to Manage AutoComplete in Internet Explorer 11 How to Browse the Web Anonymously 9 Best Ways to Hide Your Identity Online How to Use App Tracking Transparency on iPhone How Does the Microsoft Edge Password Monitor Work?
thumb_up
2 likes
R
Manage Browsing History and Private Data in Firefox How to Protect Private Info Stored on Your iPhone How to Disable WebRTC What is TLS vs. SSL in Online Security?
thumb_up
24 likes
H
What Are Cookies on a Computer? What Is an SWF File?
thumb_up
39 likes
D
(And How to Open or Play One) Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies
thumb_up
13 likes
Similar Discussions
-
Caribbean Premier League 2022 Qualifier 2 Guyana Amazon Warriors vs Jamaica Tallawahs Probable XIs Match Prediction Pitch Report Weather Forecast and Live Streaming Details
-
Who is RockyNoHands? Paralyzed streamer defeats Elden Ring using only his mouth
-
If you think this is either funny or good for the sport you have a serious problem Tennis fans disgusted by Alexander Bublik s outrageous shot during Metz final loss
-
NASCAR 2022 Total prize money for Autotrader EchoPark Automotive 500 at Texas Motor Speedway
-
Top 5 features in Free Fire OB36 update for MAX version
-
Mandy Rose s real life friend claims she was her favorite rival in WWE
-
WATCH Seattle Mariners outfielder Sam Haggerty makes one of the most spectacular non catches you will ever see
-
Barcelona in negotiations to sign ex Real Madrid attacker before transfer deadline Reports
-
I m gonna strike out your dad tomorrow Jacob deGrom delivers on bold promise to Freddie Freeman s son Mets ace pitches a gem to edge out Dodgers at Citi Field
-
Dietrich Mateschitz Red Bull co owner energy drink giant dies aged 78 BBC Sport
-
Will Liverpool manage to Qualify for UEFA next season? The News Pocket
-
One Piece Episode 976 Release Date Time Where to Watch The News Pocket
-
Bobby Flay Girlfriend 2022 Know All About His New Girlfriend The News Pocket
-
Octopus Baccara Controller APK Download for Android APKfun com
-
Photo Gallery Album Editor APK Download for Android
-
Dragon Village APK Download for Android
-
LFI d pose un amendement pour que l impossibilit de faire le plein soit un motif d absence au travail
-
Steam Decks will soon feature a list of internal components
-
La generosidad se abre camino en la guerra Guerra Ucrania Ucrania
-
Texas state police fire 1st officer over Uvalde response Ap Associated Press
-
El tratamiento para la depresi n modifica la estructura del cerebro adulto Salud Cerebro
-
The Callisto Protocol Release date Trailers platforms amp everything we know Dexerto
-
Shazam and Aquaman sequel release dates pushed back Dexerto
-
Minecraft YouTuber Technoblade passes away after battle with cancer
-
OpTic Texas sign Prolute to CDL roster as temporary iLLeY replacement
-
Former Hololive star Uruha Rushia re debuts under Mikeneko alias
-
Destiny 2 Xur Location and Inventory May 20 2022 The Nerd Stash
-
Westminster has a higher proportion of openly gay MPs than any other parliament in the world
-
You can t take a life and not answer for that Harry Dunn s parents react after Anne Sacoolas pleads guilty in U K teen s road death CBS News
-
Hurry This HP Chromebook has a massive discount today Digital Trends