All the latest UK technology news, reviews and analysis

Using JavaScript to steal confidential information (video blog)

by Tom Sanders

13 Aug 2007

Comments: 7

  • Tweet this

Would you mind if your insurance provider knew that you've been researching certain diseases online, or that you regularly order cigarettes online even though you're listed as a non-smoker on your life insurance policy?

And it can be worse. In August 2006, the New York Times succeeded in tracing a series of anonymised search queries back to 62-year-old Thelma Arnold.

Knowing a person's search history is a real privacy issue, and it doesn't take much. In this video blog episode, we look at a JavaScript application that searches for past queries. Website operators can embed the code on their site and find out all kinds of sensitive information.

Next week: Password stealing Trojan

Previous episodes:
Attacking online applications for profit
Why botnet herders love adware

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

97%

1%

1%

0%

1%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

Developer - Technology driven hedge fund

My client is one of the most successful and highly regarded...

Senior Java Developer - Online Gaming

Java/J2EE, Agile, Scrum, Test driven development, Pair...

C# / ASP.NET Software Developer - Online Gambling

C# / ASP.NET Software Developer - Online Gambling - London...

Java Developer - highly transactional gaming site

Developer, Gaming / Finance, 35-50k My client are...

To send to more than one email address, simply separate each address with a comma.