Last week we lead a story @MicrosoftEdge & @googlechrome enhanced spellcheck sending PII & passwords - "spell-jacking" data. We will be releasing more details later this week. Stay tuned. https://t.co/97isH06JlV
Microsoft Edge's and Google Chrome's advanced spellcheck tools are sending the data they review - even sensitive information like passwords - back to those companies.
Read the full story:
https://t.co/sTwSRm90fb
Las herramientas de corrección de texto de Google Chrome y Microsoft Edge envían nuestras contraseñas a los servidores de Google y Microsoft, reveló una investigación de @otto_javascript. https://t.co/IISStGWbEi
Josh Summitt, cofundador y CTO de @otto_javascript, comenta que casi todo lo que un usuario ingresa en campos de texto mientras el corrector ortográfico se encuentra activo se envía posteriormente a los servidores de Microsoft y Google.
Josh Summitt, co-founder & CTO of JavaScript security firm
@otto_javascript suggests this is, or should be of significant concern for companies.
https://t.co/aINZMGA3qm
Get @otto_javascript's free Chrome extension that will alert users when they are visiting a website that has the risk of data leaks caused by enhanced spellcheck/spell-jacking #spelljacking https://t.co/63wSwZRkFr
Spell-Jacking isn’t just a clever quip for witches.. Researchers at otto-js discovered that Enhanced Spellcheck in Chrome and MS Editor in Edge could inadvertently leak sensitive information to third parties: https://t.co/ndCnneQAru
Spell-Checking in #GoogleChrome, #MicrosoftEdge#Browsers Leaks #Passwords. It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services. https://t.co/Y2y3ObPnWW
Chrome & Edge Enhanced Spellcheck Features Expose PII, Even Your Passwords - Some of the largest websites in the world have exposure to sending Google and Microsoft sensitive user PII, including username, email, and passwords
https://t.co/VztiVly0PM
https://t.co/kBomZTANEO
FYI for Chromium web browser users that also use enhanced spellcheck. I always recommend against displaying your password on web browsers especially for cases such as this. #Chrome#Google#GoogleChrome#Security#IT