https://arstechnica.com/tech-policy/2017/11/an-alarming-number-of-sites-employ-privacy-invading-session-replay-scripts/
If you have the uncomfortable sense someone is looking over your
shoulder as you surf the Web, you're not being paranoid. A new study
finds hundreds of sites—including microsoft.com, adobe.com, and
godaddy.com—employ scripts that record visitors' keystrokes, mouse
movements, and scrolling behavior in real time, even before the input is
submitted or is later deleted.
Session replay scripts are provided by third-party analytics services
that are designed to help site operators better understand how visitors
interact with their Web properties and identify specific pages that are
confusing or broken. As their name implies, the scripts allow the
operators to re-enact individual browsing sessions. Each click, input,
and scroll can be recorded and later played back.
A study published last week reported that 482 of the 50,000 most trafficked websites
employ such scripts, usually with no clear disclosure. It's not always
easy to detect sites that employ such scripts. The actual number is
almost certainly much higher, particularly among sites outside the top
50,000 that were studied.
No comments:
Post a Comment