Banner ads on CNN.com contain keyloggers

#1

Post by braxxox » Tue, Jul 17, 2018, 4:21 PM UTC

Banner ads on CNN.com contain keyloggers
twitter.com

Re: Banner ads on CNN.com contain keyloggers

#2

Post by sbinthree » Tue, Jul 17, 2018, 4:25 PM UTC

How likely is this to be due to accessibility (ie. keyboard-only users) vs. keylogging?

Re: Banner ads on CNN.com contain keyloggers

#3

Post by reilly3000 » Tue, Jul 17, 2018, 4:34 PM UTC

What could an advertiser good to track with key logging? Password to their... CNN account??

Re: Banner ads on CNN.com contain keyloggers

#4

Post by ruskerdax » Tue, Jul 17, 2018, 4:34 PM UTC

sbinthree wrote: post #2

How likely is this to be due to accessibility (ie. keyboard-only users) vs. keylogging?

Doesn't seem likely that an advertisement would need to embed that kind of functionality.

Re: Banner ads on CNN.com contain keyloggers

#5

Post by notadoc » Tue, Jul 17, 2018, 4:35 PM UTC

Here's what is actually being run

http://dmauro.github.io/Keypress/

Re: Banner ads on CNN.com contain keyloggers

#6

Post by mipmap04 » Tue, Jul 17, 2018, 4:36 PM UTC

reilly3000 wrote: post #3

What could an advertiser good to track with key logging? Password to their... CNN account??

A password to an individual's CNN account could easily be their same login to their bank or other more important account.

Re: Banner ads on CNN.com contain keyloggers

#7

Post by Mister_Snuggles » Tue, Jul 17, 2018, 4:36 PM UTC

Things like this make me happy that uMatrix exists.

Re: Banner ads on CNN.com contain keyloggers

#8

Post by giancarlostoro » Tue, Jul 17, 2018, 4:36 PM UTC

reilly3000 wrote: post #3

What could an advertiser good to track with key logging? Password to their... CNN account??

People can buy ads and place their own JS in them I'm guessing... This might go beyond just CNN.

Re: Banner ads on CNN.com contain keyloggers

#9

Post by [deleted] » Tue, Jul 17, 2018, 4:36 PM UTC

ruskerdax wrote: post #4

sbinthree wrote: post #2

How likely is this to be due to accessibility (ie. keyboard-only users) vs. keylogging?

Doesn't seem likely that an advertisement would need to embed that kind of functionality.

[deleted]

Re: Banner ads on CNN.com contain keyloggers

#10

Post by notadoc » Tue, Jul 17, 2018, 4:38 PM UTC

reilly3000 wrote: post #3

What could an advertiser good to track with key logging? Password to their... CNN account??

My guess would be to see what people are typing but not submitting, along with what they're searching for, commenting, etc.