Slashdot Mirror
Over 400 of the World's Most Popular Websites Record Your Every Keystroke (vice.com)
An anonymous reader quotes a report from Motherboard: The idea of websites tracking users isn't new, but research from Princeton University released last week indicates that online tracking is far more invasive than most users understand. In the first installment of a series titled "No Boundaries," three researchers from Princeton's Center for Information Technology Policy (CITP) explain how third-party scripts that run on many of the world's most popular websites track your every keystroke and then send that information to a third-party server. Some highly-trafficked sites run software that records every time you click and every word you type. If you go to a website, begin to fill out a form, and then abandon it, every letter you entered in is still recorded, according to the researchers' findings. If you accidentally paste something into a form that was copied to your clipboard, it's also recorded. These scripts, or bits of code that websites run, are called "session replay" scripts. Session replay scripts are used by companies to gain insight into how their customers are using their sites and to identify confusing webpages. But the scripts don't just aggregate general statistics, they record and are capable of playing back individual browsing sessions. The scripts don't run on every page, but are often placed on pages where users input sensitive information, like passwords and medical conditions. Most troubling is that the information session replay scripts collect can't "reasonably be expected to be kept anonymous," according to the researchers.
Quite often, these scripts are part of jQuery or some other JS framework that "needs" to know your keystrokes as a part of the web site interface, "application" if you will. Sure, this info can be used nefariously, but most likely the purpose is the web site interface mechanics itself.
If you want news from today, you have to come back tomorrow.
Yandex searches as you type, so its hardly surprising it captures and sends the keystrokes in realtime....
But then again, so does Google, so why isn't Google on that list?
Not a lot of typing over at Thick Thigh Tranny Bitches.com
I started typing:
"I fucking hate you, Microsoft. I'm going to bomb your Azure datacenters and slit your throats. Eat shit and die, you incompetent fucks."
Then I deleted it and actually submitted:
"Dear Microsoft. I hereby request that you close my Azure account as I found the service unsuitable to my specific needs at this time. Thank you very much in advance. Sincerely yours, X."
So now you're telling me that they have seen the first version?
Which big-name sites are doing this?
How about a list please, a useful list, name of company, data stolen, scripts and cookies to be killed upon a slow smouldering flame. How can you say 400 without having a list of the 400. That 400 players to add to noscript and cookiemonster.
Chaos - everything, everywhere, everywhen
As one of the links even mentions, Facebook was caught doing the same with status updates (recording everything you type, even if you delete it before posting) back in 2013. What's news here is the extent to which websites are doing this these days.
For years now I've been operating under the assumption that websites collect as much data on user interaction as possible, even including things like what links you mouse over (not necessarily click on), how long you spend reading content before moving on, and how long the cursor remains on different parts of the page. This is yet one more reason why I never browse without NoScript and uBlock Origin. Fortunately, as reported in the first link:
Does tracking protection help?
Two commonly used ad-blocking lists EasyList and EasyPrivacy do not block FullStory, Smartlook, or UserReplay scripts. EasyPrivacy has filter rules that block Yandex, Hotjar, ClickTale and SessionCam.
Now that this practice is getting a little more attention, here's hoping that more of these sites will be added to popular blocklists.
I have a nervous habit of idly swirling the mouse around while I read, and I've long suspected that sites were logging these movements. So, it's a habit that I've never tried to break, but rather I've been hoping that by passing the cursor over all sorts of page elements hundreds of times in the course of a few minutes, I'm screwing with their data collection somehow.
The list of websites:
https://webtransparency.cs.princeton.edu/no_boundaries/session_replay_sites.html
every website before deleting that and entering new text isn't a wasted effort. Thanks for letting us know.
JS, as dangerous as it really is, doesn't even hold a candle to WebAssembly.
Cookies are fucking welcome in comparison.
I guess they do really know what I'm thinking when I leave feedback but can never send the form.
--
"Ribbit" - Unknown frog
On the other hand, much of the web is run on advertising dollars, and we are in an arms race between intrusive tracking and privacy. It is therefore anyones guess how this will be used moving forward.
"She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
RTFA. Thanks in advance.
Obviously any autocomplete funcitonality, or the like, is going to require keystrokes sent to the server. A post will not suffice.
Cue the anti-script militants who prefer to download, compile, and install a native app when things like autocomplete are necessary.
And even in earlier versions, such as the Firefox 52 that people are using in order to give Mozilla a few more months to make necessary APIs available to WebExtensions, the user can turn on Tracking Protection system-wide by entering about:config and turning on privacy.trackingprotection.enabled. The drawback is that several sites, such as TV Tropes, intentionally conflate tracking protection with an ad blocker and block page views until the user activates the "Disable protection for this site" control.
Does disabling javascript help? I disabled it recently and the internet looks the way it used to. No fancy shit moving around with auto scrolling pages, very refreshing.
Only the State obtains its revenue by coercion. - Murray Rothbard
The list is actually really long, over 90000 to be more precise. For 'session recording' web (aka tracking) it's over 7000.
Give me a spec for what such a tool should do, and I might see if someone can build one and release it as free software. Does this feature set sound right for a minimum viable product?
My cat was walking on the keyboard again.
Have gnu, will travel.
from the browser. It's the only way to be sure.
Can anyone suggest an extension to totally block this illegal 3rd party key logging? Ty.
Domestic spying is now "Benign Information Gathering"
Previously I would have said NoScript, but Firefox has completely botched that whole migration.
Use Brave as your browser and it has script controls implemented by default. You can globally block scripts and then enable on each site as needed.
No wall, no travel ban, no Obamacare repeal, no draining of the swamp, definitely no being president "for all Americans"... Whole lotta cheating at golf, though, so I guess you can be proud of that.
Tell me again why Noscript isn't the default mode of every browser?
Why does, for example, slashdot think that I want to run software provided by truste.com, janrain.com or pro-market.net? I don't know any of those sites, and while I appreciate that slashdot trusts those sites not to harvest my data or harm my computer, they aren't exactly the party with skin in the game.
If you want to see how fucked up the web is, how fucked up we've allowed it to become, install noscript and set your browser to treat OCSP failures as hard errors. We have the technology to fix this. We just don't care enough to use it.
See that "Preview" button?
[ ] Don't pay for every website you access, that's what ads are for. Let advertisers be unable target you and unable to track you specifically, etc., which means sellers of ads won't make as much money, and certain companies won't have billions or trillions of dollars that they only have because people tolerated this behavior. I typed a bunch of stuff after this, but no one is going to read it anyway.
Our reign has gone on long enough. Indeed. Summon the meteors.
It seems like these websites are going to a lot of trouble to discover that I can't type and can't spell.
I do not much like this mis-behaviour and mostly browse using `links2`, a lynx-like text browser. Missing images is a feature :)
so if the website steals the errant/orphan/reconsidered keystrokes does that mean windows doesn't capture them maybe this is the lesser of two evils.
Nullius in verba
what are they doing with that information? I mean 99.99% of that is completely boresome, and for the rest, they'd need a quite capable AI algo to extract relevant information. Unless there is a 24/7 staff in charge of checking the crap that's been entered then deleted... which I doubt.
Slashdot, fix the reply notifications... You won't get away with it...
Tea Leaf has been doing this since Bush was in office. Not news or new.
That proves (even if we've known that for a while) there is no control of web sites behavior. A concrete analogy is, you're angry after the tax office because you pay too much taxes, and start to write a letter, joking around, "go f..k yourself" etc... then throw that paper away and write the real one. Following this web site behavior, the tax officer is constantly looking over your shoulder - without you being even aware of that. This is totally unacceptable. The user should be at least made aware of that spying policy.
Slashdot, fix the reply notifications... You won't get away with it...
#NonInvasiveAdvertising
Yeah, but he's good at telling a private organization (the NFL) how to behave!
^h^h^h^h^h^h^h^h^h^h^H^H^H^H^H^H^H^H^H^h^H^H^h^H^H^H^H keyboard apoc^Halypse
The editors are much too lazy to implement something like this in their 20 year old Perl abomination.
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
And webasm is not the solution. embedding scripts in a text document has been always a terrible idea.
Similar topic:
Samsung's Bixby..... you can't turn it off. You can disable the button by agreeing to Samsungs terms, and then switching the button off, but in agreeing to the terms, Samsung gets your contacts, sms's, emails, accounts, location, usage of apps, wifi data, media consumed, everything. Bixby is still running, even if disabled from popping up, and still sending that data off to Samsung, all logged against your account.
What's happening on Android is orders of magnitude worse than happens on the internet.
My current position about privacy is acceptation of the reality (everyone, everywhere dealing with my a-priori-not-too-relevant data without my express consent) + neither liking nor really minding it. The key issue allowing me to think in that way is knowing what is being mostly done with that data now and in the near future: not too much.
Most of big-data efforts have been focusing on gathering and managing, but not on properly understanding; that's why and despite its huge potential value, most of this information isn't being properly maximised. In any case, I certainly don't support any kind of against-intention-of-user actions, I have never developed or used anything on so invasive lines and look forward to legislations to keeping up with all what is happening on the online/software privacy front.
Custom Solvers 2.0 = Alvaro Carballo Garcia = varocarbas.
Is this legal ? Most likely not in the EU, and most likely not anywhere else.
Capturing my keypresses without my permit would be illegal almost everywhere.
I like how you think it's cute to type "boxen". We're all grown up now. You should try joining us in the adult world.
So, this is completely overblown out of proportion. I'm a web dev, and more. Basically I've been deciding and implementing all sort of web things, including this "tracking" everybody is hung up about. Everywhere I worked at, the "tracking" is used for the good of a consumer as in ... analyzing data to provide better user experience, to make it easier for the users to find what they need ( granted: in effort to increase sales ), when they need it, and overall just increase user experience.
After 15 years of being in the business, I never seen tracking for malicious purposes (or purposes other than attempting to make it easier for YOU to use the website ).
I understand the concerns people are having, but jesus christ you people talk about it like we're filming you while in a shower, just because websites track where people click and what they insert into a web form ( on their own sites ) does not mean they CARE about you. No business cares about the individual.. but about statistics, percentages, numbers.
It's even said so in the article summary:
"Session replay scripts are used by companies to gain insight into how their customers are using their sites and to identify confusing webpages."
What on earth is so wrong about this ?
For people doing it, this is you "a3727fd0a20d5eef697d3c2f41bf0e4d". This is what they see and track, and care about.
Get over yourself, for god sake.
Gee, you don't make it sound very welcoming or enjoyable. I can only imagine you think the best way to make yourself feel better about your miserable life is to drag other people down to your level. It stinks of a trap. Or, maybe that wasn't your intent and in reading this you just realized you're still a petulant child after all?
You know how Goggle and others do autocomplete on your search entries?
Yeah I do. They don't typically do so on username or password fields. Maybe read the entire summary or article and actually understand the topic at hand before posting. Your UID is too low to be spouting something so silly.
Here's a fun party trick: go to Google.com, type in "Hillary Clinton", and try to get autocomplete to say something bad about her. Then, try it with "Donald Trump" (impeachment was the first auto-complete result I got, it may vary with your location).
During the James Damore scandal, I couldn't get Google to suggest anything at all about his name. It just suggested variations on "d'amore", the French word for love. Weird, eh?
Shutting down free speech with violence isn't fighting fascism. It IS fascism!
It's almost as though the web were some sort of client-server technology!
In general most users might say they care about privacy but most don't really. It's like a knee jerk reaction to follow the crowd and say you care. Its hypocritical to complain about Microsoft Windows collecting data but not Google. Because I guess most people use Chrome and Google services. Even if you live your web life in a so called private browsing mode. Are you really?
"I must not have fun. Fun is the time-killer. Fun is for children, customers, and the help. I will forget fun. I will take a pass on it. And while it is going, I will turn a blind eye toward it. When fun is gone there will be nothing. Only I will remain—I, and my will to win. Damn, I'm good."
Make it apply to textareas. Or prevent all javascript affecting textareas.
You know how Goggle and others do autocomplete on your search entries? Or spell check in text boxen? Or mouse zooming? How could they do this if every mouse/keystroke was not sent to them?
You know you can turn off autocomplete in your browser search field, right?
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
My company uses one these services to help identify site issues. That said, we mask many of the user entered fields for PII and PCI compliance. I can watch what you searched for on the site and other interactions with the site. Big deal.
and mostly browse using `links2`, a lynx-like text browser. Missing images is a feature :)
I use emacs for web browsing. I win.
Yes, at least some browsers have this setting. And as another poster mentioned, scripts do not autocomplete all fields (uid/pwd). But this does not necessarily stop the scripts from running and sending running data, even if the browser does not show any useful return. Websites can adjust their behaviour per user, and might appear less intrusive to some users. Cookies & per-user scripts. That does not mean that they do not track and capture data, just that they are more subtle in displaying the results of tracking.
Use uMatrix
sudo rm -r -f --no-preserve-root /
"He also forced everyone, small and great, rich and poor, free and slave, to receive a mark on his right hand or on his forehead, so that no one could buy or sell unless he had the mark, which is the name of the beast or the number of his name. This calls for wisdom. If anyone has insight, let him calculate the number of the beast, for it is man's number. His number is a3727fd0a20d5eef697d3c2f41bf0e4d."
Twinstiq, game news
That's the case for Yandex too, and so, an invalid answer. Holy shit are "people" robots these days! Is this the Microsoft hotline, or what?
The first step to fixing this problem is to decide there is a problem.
Then put real constraints on these programs called web pages that folks allow to randomly run on what they fondly think of as their computers.
The first constraint might be that if you click on web site A, the page must be served from web site A so you know who to blame.
Unless/until something really bad happens, I don't see that happening.
The geeks making the web are steering away from that.
For most of the folks here, a clear case of 'We have seen the enemy and he is us'.
https://en.wikipedia.org/wiki/Pogo_(comic_strip)
So you may be okay with your every keystroke recorded and sent to a third party without your prior consent or even information. Why would you then mind if someone turned on the microphone and listened to every word said in your house? How about recording your porn habit and then leaking that to your spouse, employer, law enforcement? How about leaking the fact that you looked up various diseases to potential employers, current employers, or others? How about leaking web browsing to politicians? Wouldn't you just love to be hassled by the local sheriff for opposing him? How about suspicious purchases like hydroponics equipment? If a cop can sit outside a hardware store and justify raiding someone's home based upon legal purchases of indoor gardening supplies, imagine how far that rabbit can go with a bit of tax payer money and creative investigation.
You've been isolated from the real world of how people use information to hurt other people. Every tool humans create can be and has been used to hurt other people.
Anyone ever come up with software to just pile shitloads of fake data into all these sniffers? I'd like every web page to think I hovered over every fucking link and wrote a bunch of random shit. All day every day.
Would like to see something that requests pages off completely random websites every few seconds. Sure would make GCHQ style pricks work for their dinners.
If you can't stop the trickle, make them drink from the fucking firehose.
I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
Well well well how predictable that search engine companies are still "in bed" with the NSA and all those Nosey shady government entities. .....
#RIP Privacy
Switch it Off,Switch it On[SOSO] Solves 95% of all IT problems!
I am using Firefox ESR (Extended Support Release) https://www.mozilla.org/en-US/... for this only reason, can keep using the add-ons i want. They are currently at version 52.5
I think I understand your point, there ARE valid uses for this.
It's frustrating to develop software and not have full understanding about how your clients use it. There is a desire and a need to have that information in raw data that can be used to make the product better. It could even be used by client support and to help prevent bugs. I'm not talking about shopping carts or blogs, but enterprise-level systems that are very complex.
But let's not kid ourselves... that isn't what this story is about.
My beliefs do not require that you agree with them.
jail time for somebody for illegally snooping without consent. Oh, we are in the USA, sorry for bringing that up.
So the page can refresh itself for live updating content.
Likely reply of anti-JS hardliners: "I don't want live updating content in the web browser. I'll press Ctrl+R to poll for new content when I want new content, thank you very much. If I wanted live updating content, I would download, compile, and install a native application that provides live updating content, such as an IRC client."
It's time they start.
I am so tired of typing out "Shazam" and "1234" in their entirety . . . :)
hawk
"he Linus'ed everyone's brains. He just uploaded his ideas to the interwebs and now everyone is mirroring them! He doesn't even have to post anymore, we are doing it for him! Well done APK, well done." - by Dread_ed ( 260158 ) on Tuesday November 21, 2017 @11:30AM (#55595451)
See subject: You hit the nail on the head on what my "ne'er-do-well" jealous detractors can't stand & manage themselves OR do better than creating it themselves (all talk do nothing jokes).
* After replies like yours? The JOKE is truly on them (above being the windbag bs artists they are, IT IS TOO OBVIOUS, they are all talk/no action)!
They couldn't get the better of me technically proving my points wrong, so now they effetely use Saul Alinsky RULES FOR RADICALS "tactics" losers use of mockery on me (last resort of losers except they're in reverse being backasswards idiots that they are ala Ghandi "1st they ignore you, then they LAUGH @ YOU, then they fight you, & then I WIN!"
Well - there is NO mockery of my success & doing well - you prove that much in YOUR reply!
So thank you again Dread_ed!
APK
P.S.=> They're 1 of 5 types in "their kind" above the jealous worms I note above - Advertisers, webmasters (both profiting by ads that slow, track, infect & annoy users), malware makers, botnet herders OR inferior competitors - period (it's too obvious)... apk
Shouldn't have opened YOUR "piehole" about it - PiHole/DNSMasq = buggy, exploitable & dangerous https://yro.slashdot.org/comments.pl?sid=11381875&cid=55596087/
* Better luck next time boys - you REALLY need it vs. me!
APK
P.S.=> Ah yes, folks - there is NOTHING QUITE LIKE being invincible, lol... apk
Oh i love that feature that replaces text i am typing with some other random terms and then when you try and highlight the field to delete the stupid auto complete, it actually submits the search (because you are clicking on the term in some kind of blocking mouse order drop down list). I also love the browser lag that these stupid lookups cause.
What a wonderful feature that no one needs! is it really hard to type entire words and sentences without a computer holding your hand for you?
As a potential lottery winner, I totally support tax cuts for the wealthy
See subject + TONS of proofs galore enumerated (not even fully complete mind you) https://news.slashdot.org/comments.pl?sid=9007355&threshold=-1&commentsort=0&mode=thread&pid=51969075/
Addtionally - DNS many "moving parts" & excessive complexity OPEN IT TO EXPLOIT & excess power, cpu, ram & other I/O use = inefficient vs. hosts (a SINGLE part of the TCP/IP stack itself makes DNS locally even inferior (calling out to remote DNS, 99++% of which are unpatched vs. the kaminsky redirect security bug = bad news/risky)) - FACT: Hosts are NOT "illogic-logic" of "Bolting on 'MoAr'", local DNS is!
APK
P.S.=> Accept NO substitute for APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
I'm going to continue using the Host File Engine. Your software is well written, functional. The Host File Engine performs exactly as promised by mmell
his hosts program is actually pretty good by xenotransplant
his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg
(APK's) work, I've flat out said it's good by BronsCon
I've tried his hosts file generating software. It works by bmo
APK your posts on this & the hosts file posts, and more, have never been in error &/or bad advice by BlueStrat
Your premise that hostfiles are a good way to deal with advertising & malvertising is quite valid by JazzLad
I like your host file system by Karmashock
(NEED MORE? Ask!)
* It's recommended/hosted by Malwarebytes' hpHosts!
APK
P.S.=> China imitated me http://www.theregister.co.uk/2017/04/26/boffins_supercharge_the_hosts_file_to_save_users_plagued_by_dns_outages/ ... apk
Hosts protect when addons can't (or as well):
Bad sites (past ads)
Botnet C&Cs
DNS down/poisoned
Trackers (dns logs/ads/transparent ISP proxy)
Dns blocks
Spam/phish payload
Slowdown 2 ways: adblocks & hardcodes
Hosts = Ez edit.
AB+ 151mb https://www.google.com/search?q=Adblock+memory+consumption&btnG=Search&hl=en&gbv=1/
UBlock 64MB https://www.google.com/search?q=UBlock+memory+consumption&btnG=Search&hl=en&gbv=1/
Hosts~6mb
Addons = ClarityRay defeatable & crippled http://www.businessinsider.com/google-microsoft-amazon-taboola-pay-adblock-plus-to-stop-blocking-their-ads-2015-2/
NoScript tag parses. Hosts block script prior to it!
No 1 addon does as much.
Stacked addons slowup.
ADDONS = EXPLOITABLE https://news.slashdot.org/comments.pl?sid=11166303&cid=55266729/
APK
P.S.=> APK Hosts File Engine https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
See subject & so much for Pi-Hole/DNSMasq being safe (discovered in late Sept. & still unpatched afaik) https://www.bleepingcomputer.c... [bleepingcomputer.com]
* Stack & heap "buffer" overflows galore, bypasses of ASLR, memory leaks (lacks free for malloc/needs delinting), Boundary checks needed & bug collision.
PiHole also means spending on a raspberry Pi unit (vs. hosts = native & free) + running TONS of moving parts (of which may also have exploitability & inefficiency - complexity IS the enemy of security + efficiency).
* LASTLY - Someone SURE DIDN'T LIKE THIS BAD NEWS for Pi-Hole users having to TRY to effetely "downmod hide it" last time I posted it, lol -> https://yro.slashdot.org/comments.pl?sid=11381875&cid=55596087/
APK
P.S.=> Accept NO substitute for https://yro.slashdot.org/comme... [slashdot.org] by "yours truly"... apk
For those who don't want to be bothered with customizing things, there is Ghostery. uBlock Origin for the bulk of ads (fast elimination) and Ghostery picks up trackers and anything left over. Between the two, I rarely see weird web requests being made except that which is absolutely necessary to render the page correctly.
APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
Ads/script/malware rob speed/security/privacy/bandwidth.
Hosts add speed (via hardcodes/adblocks), security (vs. bad sites/malware/poisoned dns), reliability (vs. dns down), & anonymity (vs. dns requestlogs/trackers).
Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus + less security bugs/complexity & faster vs. addons/routers/remote dns!
Avoids DNSChangers in routers/IP settings & dns redirect (99++% of ISP DNS != patched vs. it) + DNS tracking & lighten DNS load & resolve faster from local RAM!
* Via what u NATIVELY have in a FASTER kernelmode IP stack (doing more w/ less).
APK
P.S. - Safe https://www.virustotal.com/en/file/e01211ca36aa02e923f20adee0a3c4f5d5187dc65bdf1c997b3da3c2b0745425/analysis/1433430542/ (self checking code vs. infection of it built-in)
I can only hope someone sets up a botnet to visit these sites and relentlessly hammer their pages with searches for bizarre words and profanity.
My beliefs do not require that you agree with them.
I'm going to continue using the Host File Engine. Your software is well written, functional. The Host File Engine performs exactly as promised by mmell
his hosts program is actually pretty good by xenotransplant
his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg
(APK's) work, I've flat out said it's good by BronsCon
I've tried his hosts file generating software. It works by bmo
APK your posts on this & the hosts file posts, and more, have never been in error &/or bad advice by BlueStrat
Your premise that hostfiles are a good way to deal with advertising & malvertising is quite valid by JazzLad
I like your host file system by Karmashock
(NEED MORE? Ask!)
* It's recommended/hosted by Malwarebytes' hpHosts!
APK
P.S.=> China imitated me http://www.theregister.co.uk/2017/04/26/boffins_supercharge_the_hosts_file_to_save_users_plagued_by_dns_outages/ ... apk
How is this even news - TeaLeaf, since being bought by IBM is near ubiquitous on most new e-com deployments, and in this community I thought enough people would have known this fact..
Theres a plugin for that. :)
https://wordpress.org/plugins/...
I think this one actually records a video of the user interactions.
[($)]
After 15 years of being in the business, I never seen tracking for malicious purposes (or purposes other than attempting to make it easier for YOU to use the website ).
I have never seen a robbery, but that doesn't mean they don't happen.
theweatherelectric, thank-you - I was waiting for that (it functions like Vivaldi's does (not as 'granular' by default @ least as NoScript on older FireFox was - BUT, it does work)).
* Yes people - on FF browsers, I use an AddOn but more for 1 reason: TO POPULATE MY HOSTS FILE vs. TRACKING SCRIPTS!
Except older NoScript on FF older models TOLD ME where 3rd party & LOCAL scripts were for hosts - new one doesn't seem to BUT IT DOES WORK (which blocks script FAR FASTER in kernelmode via the IP stack itself LONG before NoScript parses script src tags in HTML webpages)).
APK
P.S.=> Onwards & UPWARDS... apk
hurr durr liberals blurrrr
See subject: Hostsman doesn't speed up your fav sites you spend most time online @ - mine does (which also secures you vs. dns down or kaminsky redirect flaw poisoned dns) & it uses SQLite (which has a BUG in it Google Found Over 1,000 Bugs In 47 Open Source Projects https://it.slashdot.org/story/17/05/13/0113255/google-found-over-1000-bugs-in-47-open-source-projects/ & YES - SQLite IS one of those found with flaws there... )
* Has SQLite been PATCHED vs. that? Not that I'm aware of (feel free to correct me if so) & HAS HOSTSMAN been reissued WITH said patched SQLite?? Again - not that I am aware of.
APK
P.S.=> Does Hostsman work? Yes. Does it WORK AS WELL?? Hell no (but it too is hosted & equally as well noted @ Malwarebytes' hpHosts where my program is featured alongside it)... apk
There are still good, honest companies. For example, I happily pay Fastmail for their email service, which as an IT guy approaching 20 years in the business, I have yet to see its rival. I've been a customer since 2002 and I've tried them all. Fastmail rivals them all. Fastmail are honest, quick to help, and have never done me wrong. They enjoy consistently high reviews from users. They give a damn and it shows in their product.
Hosts protect when plugins can't (or as well):
Bad sites (past ads)
Botnet C&Cs
DNS down/poisoned
Trackers (dns logs/ads/transparent ISP proxy)
Dns blocks
Spam/phish payload
Slowdown 2 ways: adblocks & hardcodes
Hosts = Ez edit.
AB+ 151mb https://www.google.com/search?q=Adblock+memory+consumption&btnG=Search&hl=en&gbv=1/
UBlock 64MB https://www.google.com/search?q=UBlock+memory+consumption&btnG=Search&hl=en&gbv=1/
Hosts~6mb
Addons = ClarityRay defeatable & crippled http://www.businessinsider.com/google-microsoft-amazon-taboola-pay-adblock-plus-to-stop-blocking-their-ads-2015-2/
NoScript tag parses. Hosts block script prior to it!
No 1 addon does as much.
Stacked addons slowup.
ADDONS = EXPLOITABLE https://news.slashdot.org/comments.pl?sid=11166303&cid=55266729/
APK
P.S.=> APK Hosts File Engine https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
Hosts protect when plugins can't (or as well):
Bad sites (past ads)
Botnet C&Cs
DNS down/poisoned
Trackers (dns logs/ads/transparent ISP proxy)
Dns blocks
Spam/phish payload
Slowdown 2 ways: adblocks & hardcodes
Hosts = Ez edit.
AB+ 151mb https://www.google.com/search?q=Adblock+memory+consumption&btnG=Search&hl=en&gbv=1/
UBlock 64MB https://www.google.com/search?q=UBlock+memory+consumption&btnG=Search&hl=en&gbv=1/
Hosts~6mb
Addons = ClarityRay defeatable & crippled http://www.businessinsider.com/google-microsoft-amazon-taboola-pay-adblock-plus-to-stop-blocking-their-ads-2015-2/
NoScript tag parses. Hosts block script prior to it!
No 1 addon does as much.
Stacked addons slowup.
ADDONS = EXPLOITABLE https://news.slashdot.org/comments.pl?sid=11166303&cid=55266729/
APK
P.S.=> APK Hosts File Engine https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
Google does it for sure. These fucking search engines today can't wait until I press the fucking enter key. They have to SLURP UP every fucking keystroke I type.
See subject: In PaleMoon (firefox) it allows canvas.poisondata vs. it via about:config (you may have to add it, set it to TRUE).
* Enjoy...
APK
P.S.=> That was given me by others here (can't recall EXACTLY who OR I'd credit them for it, I was thankful is why) so I am only "paying it forward" is all... apk
What a frickin' useless article!
No site names included in order to protect the cash flow of the guilty. No doubt /. is one of them...
PlaynBass
.. at least the version that runs in the context of the web site.
Or isn't it?
I mean: SGP relies on you typing your master password into an entry field which it then uses together with the domain name to generate the actual password. If the sites can spy on all your key strokes, they will know your master password, which is not good.