I'm skeptical that this is a) from a banner ad and not from operation of the site b) a full blown keylogger and not a library included that is used for something like a photo gallery (that may have ads in it)
Banner ads on CNN.com contain keyloggers
21–30 of 83 posts
Re: Banner ads on CNN.com contain keyloggers
#22This is getting upvoted without getting the context.
Re: Banner ads on CNN.com contain keyloggers
#23Re: Banner ads on CNN.com contain keyloggers
#24Re: Banner ads on CNN.com contain keyloggers
#25>ssl.cdn.turner.com
Obviously bullshit. That's CNNs CDN, not a "banner ad". This guy did not put in the least bit of effort to verify his claims.
The script is included in https://edition.cnn.com/.a/2.103.4/js/cnn-header-second.min....
Re: Banner ads on CNN.com contain keyloggers
#26Sites bemoan ad blockers but then take no responsibility for the ads that are shown. That needs to change - it’s not like print advertising.
Change or not, I think the trend is not to trust ads anymore. I question whether or not it’s feasible in the long term to sustain a model based on tracking people, selling their data, and calling that “advertising.”
Oh and if you want to see what CNN is crapping out without the cruft, lite.cnn.io works well.
Re: Banner ads on CNN.com contain keyloggers
#27The point stands, but that's not really a keylogger. It's a library to manage keyboard inputs. Of course, it could also send all key info somewhere externally too.
But in what universe would an individual ad need that? This seems like precisely the sort of thing that a third party ad would be prevented from doing.
Keypress.js doesn't really help creating a keylogger.
It does make creating interactive ads easier though.
Re: Banner ads on CNN.com contain keyloggers
#28Here's what is actually being run http://dmauro.github.io/Keypress/
Why aren't the code snippets in a monospace font? Is there readability ux that thinks this is a good idea?
they look monospace to me
Re: Banner ads on CNN.com contain keyloggers
#29Sites bemoan ad blockers but then take no responsibility for the ads that are shown. That needs to change - it’s not like print advertising.
Right? Imagine IRL advertising that would break into your house and put up advertising posters or plant listening devices.
Re: Banner ads on CNN.com contain keyloggers
#30Things like this make me happy that uMatrix exists.
indeed ! keypress.js is blocked on the easyprivacy list as well.