Comments on: Capturing users info via auto-form fill and Ajax

By: Peace Data : Capturing users info via auto-form fill and Ajax

Peace Data : Capturing users info via auto-form fill and Ajax — Mon, 13 Nov 2006 16:00:09 +0000

[...] Posted by Redline Mon, 13 Nov 2006 16:00:37 GMT Most of the auto form fillers use the name of the input to work out what a site means. What if a random put up what looked like an innocent form, but it auto filled and tried to send over inputs with the names: cc, creditcard, credit_card, email, address, …. [...]

By: .: blogging augusto :.

.: blogging augusto :. — Thu, 09 Nov 2006 18:56:34 +0000

Aufgepasst im Web2.0

Vor einiger Zeit hab ich in dem Artikel Sicherheit im Web2.0 vor allem auf ein paar Probleme beim Einsatz von Web2.0-Technologien in der Entwicklung hingewiesen. Viel problematischer ist aber wohl das VerstÃ¤ndnis des Themas fÃ¼r den Anwender. Bei ordentl

By: Garcia

Garcia — Sun, 05 Nov 2006 07:43:00 +0000

Newsflash! Hold your horses! Web 3.0 is here! It turns out Javascript can access the contents of form fields now! Imagine the possibilities!

By: Quasievil

Quasievil — Sun, 05 Nov 2006 02:46:07 +0000

I couldn’t agree more… my “most people” comment referred to those checking this site. It’s a shame that awareness won’t take place until enough people have been duped.

By: Jacob

Jacob — Sat, 04 Nov 2006 21:40:56 +0000

Most people don’t realize this. Experts do, and web developers do, but to assume that the general population is even casually aware of these issues is assuming way too much.

By: Quasievil

Quasievil — Sat, 04 Nov 2006 18:03:42 +0000

This shouldn’t seem like much of a surprise. I only hope most people aren’t just realizing this very dangerous exploit. This is the very reason I do not even BEGIN to fill out a form unless I’m sure of the ACTUAL recipient.