otto-js

Protect your #webapplication from #clientsideattacks and third-party supply chain risks.

[otto-js @otto_javascript]

Last week we lead a story @MicrosoftEdge & @googlechrome enhanced spellcheck sending PII & passwords - "spell-jacking" data. We will be releasing more details later this week. Stay tuned. https://t.co/97isH06JlV

[otto-js @otto_javascript]

@brave @otto_javascript @otto_by_DEVCON

[Brave @brave]

Microsoft Edge's and Google Chrome's advanced spellcheck tools are sending the data they review - even sensitive information like passwords - back to those companies.

Read the full story:
https://t.co/sTwSRm90fb

[InsurgentePress @InsurgentePress]

Las herramientas de corrección de texto de Google Chrome y Microsoft Edge envían nuestras contraseñas a los servidores de Google y Microsoft, reveló una investigación de @otto_javascript. https://t.co/IISStGWbEi

[Tecnología & Gadgets @revolutegplus]

Josh Summitt, cofundador y CTO de @otto_javascript, comenta que casi todo lo que un usuario ingresa en campos de texto mientras el corrector ortográfico se encuentra activo se envía posteriormente a los servidores de Microsoft y Google.

[Carles Dijous @carlesdijous]

@the_unswerving @0kuItra @escapebusiness @1nt3l_N3w5 @sectest9 @CyberSecurityN8 @XZPwEDVhHH37i3C @Dorothy11405068 @rvp @otto_javascript @education_24x7 @nickj2k @IranFreedomland @JeanLillier @kadar_k @osmo35195362 Thanks for your RT

[Nicolás Boettcher @nicoboettcher]

Spell-jacking: Chrome y Edge transmiten contraseñas a través de su función de corrector ortográfico @datosprotegidos https://t.co/wxWrjzmEm0

[Dark Reading @DarkReading]

Believe it or not, there's something called "spell-jacking" that can threaten browsers: https://t.co/ZCxybPQTyO #Chrome #Edge

[Information Warfare Center @cyberintel]

Believe it or not, there's something called "spell-jacking" that can threaten browsers: https://t.co/iriGnK1lBE #Chrome #Edge

[Lorenzo H. Gomez @lgomezperu]

@DarkReading
Believe it or not, there's something called "spell-jacking" that can threaten browsers: #Chrome #Edge https://t.co/pBSW7Q7PyN

[Cyber guy @thereallhckrman]

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords #spelljacking
https://t.co/DPAEy2YYMK

[otto-js @otto_javascript]

Josh Summitt, co-founder & CTO of JavaScript security firm
@otto_javascript suggests this is, or should be of significant concern for companies.
https://t.co/aINZMGA3qm

[otto-js @otto_javascript]

Get @otto_javascript's free Chrome extension that will alert users when they are visiting a website that has the risk of data leaks caused by enhanced spellcheck/spell-jacking #spelljacking https://t.co/63wSwZRkFr

[Tom Garrison @tommgarrison]

Spell-Jacking isn’t just a clever quip for witches.. Researchers at otto-js discovered that Enhanced Spellcheck in Chrome and MS Editor in Edge could inadvertently leak sensitive information to third parties: https://t.co/ndCnneQAru

[Cristian Borghello @SeguInfo]

Spell-jacking: Chrome y Edge transmiten contraseñas a través de su función de corrector ortográfico
https://t.co/jskTMcpxVZ

[Carles Dijous @carlesdijous]

Spell-Checking in #GoogleChrome, #MicrosoftEdge #Browsers Leaks #Passwords. It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services. https://t.co/Y2y3ObPnWW

[ㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤ ㅤㅤ ㅤㅤㅤ ㅤㅤㅤㅤㅤ sudo rm -rf /* @ApostolWario]

#earmas RT SeguInfo: Spell-jacking: Chrome y Edge transmiten contraseñas a través de su función de corrector ortográfico
https://t.co/GTD6ao1RoQ

[TWiT Tech Podcasts @TWiT]

Here's a new #podcast episode...
Spell-Jacking (Security Now #889)
https://t.co/jnpqdt04OF

[Frank @jedisct1]

Chrome & Edge Enhanced Spellcheck Features Expose PII, Even Your Passwords https://t.co/MNvPDbxI7C

[Mir Mustafa Ali @Im_AliMustafa]

Chrome & Edge Enhanced Spellcheck Features Expose PII, Even Your Passwords - Some of the largest websites in the world have exposure to sending Google and Microsoft sensitive user PII, including username, email, and passwords

https://t.co/VztiVly0PM

[Crusher // Jody Ingram @th3crush3r]

https://t.co/kBomZTANEO

FYI for Chromium web browser users that also use enhanced spellcheck. I always recommend against displaying your password on web browsers especially for cases such as this. #Chrome #Google #GoogleChrome #Security #IT