@otto_javascript

Protect your #webapplication from #clientsideattacks and third-party supply chain risks.

 United States
otto-js.com
Joined April 2021
  • Tweets379
  • Following435
  • Followers101
243Media
Last week we lead a story @MicrosoftEdge & @googlechrome enhanced spellcheck sending PII & passwords - "spell-jacking" data. We will be releasing more details later this week. Stay tuned. otto-js.com//news/article/ch…
1
2
1
3
Replying to @brave
@otto_javascript @otto_by_DEVCON
otto-js retweeted
Brave
@brave21 Sep 2022
Microsoft Edge's and Google Chrome's advanced spellcheck tools are sending the data they review - even sensitive information like passwords - back to those companies. Read the full story: bleepingcomputer.com/news/se…

Google, Microsoft can get your passwords via web browser's spellcheck

Enhanced Spellcheck features in Google Chrome and Microsoft Edge web browsers transmit form data, including personally identifiable information (PII) and in some cases, passwords, to Google and...

bleepingcomputer.com
9
87
9
215
Las herramientas de corrección de texto de Google Chrome y Microsoft Edge envían nuestras contraseñas a los servidores de Google y Microsoft, reveló una investigación de @otto_javascript. insurgentepress.com.mx/los-c…
2
1
Josh Summitt, cofundador y CTO de @otto_javascript, comenta que casi todo lo que un usuario ingresa en campos de texto mientras el corrector ortográfico se encuentra activo se envía posteriormente a los servidores de Microsoft y Google.
1
1
Replying to @the_unswerving
@the_unswerving @0kuItra @escapebusiness @1nt3l_N3w5 @sectest9 @CyberSecurityN8 @XZPwEDVhHH37i3C @Dorothy11405068 @rvp @otto_javascript @education_24x7 @nickj2k @IranFreedomland @JeanLillier @kadar_k @osmo35195362 Thanks for your RT
3
6
Spell-jacking: Chrome y Edge transmiten contraseñas a través de su función de corrector ortográfico @datosprotegidos buff.ly/3DG3p1j
1
1
Believe it or not, there's something called "spell-jacking" that can threaten browsers: bit.ly/3LvRKUT #Chrome #Edge

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services.

darkreading.com
11
1
20
Believe it or not, there's something called "spell-jacking" that can threaten browsers: bit.ly/3LvRKUT #Chrome #Edge

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services.

darkreading.com
1
1
Replying to @DarkReading
@DarkReading Believe it or not, there's something called "spell-jacking" that can threaten browsers: #Chrome #Edge bit.ly/3LvRKUT

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services.

darkreading.com
1
1
Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords #spelljacking darkreading.com/application-…

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services.

darkreading.com
1
2
Josh Summitt, co-founder & CTO of JavaScript security firm @otto_javascript suggests this is, or should be of significant concern for companies. cisoseries.com/cyber-securit…
1
2
Get @otto_javascript's free Chrome extension that will alert users when they are visiting a website that has the risk of data leaks caused by enhanced spellcheck/spell-jacking #spelljacking chrome.google.com/webstore/d…
1
1
Spell-Jacking isn’t just a clever quip for witches.. Researchers at otto-js discovered that Enhanced Spellcheck in Chrome and MS Editor in Edge could inadvertently leak sensitive information to third parties: buff.ly/3QY3f8D
6
8
Spell-jacking: Chrome y Edge transmiten contraseñas a través de su función de corrector ortográfico ift.tt/Q674hyc
13
23
Spell-Checking in #GoogleChrome, #MicrosoftEdge #Browsers Leaks #Passwords. It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services. bit.ly/3LusOgs
4
4
#earmas RT SeguInfo: Spell-jacking: Chrome y Edge transmiten contraseñas a través de su función de corrector ortográfico ift.tt/Q674hyc
1
1
Here's a new #podcast episode... Spell-Jacking (Security Now #889) bit.ly/3BX0nVd
1
3
otto-js retweeted
Frank
@jedisct118 Sep 2022
Chrome & Edge Enhanced Spellcheck Features Expose PII, Even Your Passwords otto-js.com/news/article/chr… – at Montreuil, France
6
14
Chrome & Edge Enhanced Spellcheck Features Expose PII, Even Your Passwords - Some of the largest websites in the world have exposure to sending Google and Microsoft sensitive user PII, including username, email, and passwords reddit.com/r/technology/comm…
1
2
otto-js.com/news/article/chr… FYI for Chromium web browser users that also use enhanced spellcheck. I always recommend against displaying your password on web browsers especially for cases such as this. #Chrome #Google #GoogleChrome #Security #IT
1
1
Load more