• ipkpjersi@lemmy.ml
    link
    fedilink
    arrow-up
    48
    arrow-down
    1
    ·
    edit-2
    10 months ago

    Holy shit, that should be illegal. I say should because I know there’s no way that it currently is.

    • airikr@lemmy.ml
      link
      fedilink
      arrow-up
      14
      arrow-down
      27
      ·
      10 months ago

      Microsoft do the same with Windows and as far as I know, they haven’t got fined for it.

    • Echo Dot@feddit.uk
      link
      fedilink
      arrow-up
      4
      arrow-down
      26
      ·
      10 months ago

      There’s also no way that it’s happening. You can’t key log with JavaScript. There’s something called cross domain policies or xDomainPolicy which prevent certain types of code being run on one website by a different website.

      • KairuByte@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        24
        arrow-down
        1
        ·
        10 months ago

        Cross domain policies are enforced by the browser. If you’re using a third party app, guess what you’re using as a browser.

        Want an easy example of this? Userscrips on Firefox. Install GreaseMonkey, and you can run whatever the hell you want on any webpage. Keylogging, mouse movements, clicks and navigations. Not hard, and impossible to really stop from the site itself, because no matter what you tell the browser to do, you essentially have to just hope the browser follows through.

        • Blue_Morpho@lemmy.world
          link
          fedilink
          arrow-up
          2
          arrow-down
          1
          ·
          10 months ago

          If you’re using a third party app, guess what you’re using as a browser.

          Yes if you are inside Facebook and while inside Facebook click a link to go somewhere else you are still in Facebook and they will keylog everything.

          This is presented as if Facebook/Toktok can keylog everything.

        • Echo Dot@feddit.uk
          link
          fedilink
          arrow-up
          2
          arrow-down
          9
          ·
          10 months ago

          Somebody else is already pointed out that it’s already been debunked so no it wasn’t happening

          • FutileRecipe@lemmy.world
            link
            fedilink
            arrow-up
            8
            ·
            edit-2
            10 months ago

            And somebody else pointed out that that was debunked so yes it’s happening

            Edit: the point I’m hopefully making is that you’re just kinda saying stuff and not even bothering to post a source.

          • KairuByte@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            3
            ·
            10 months ago

            I was responding to your claim of “not happening, impossible” with proof of it being possible, and actually fairly easy to implement.

      • crab@lemm.ee
        link
        fedilink
        arrow-up
        20
        ·
        10 months ago

        But it’s not another website, it would be the web browser within the Facebook app, which could absolutely do that.

          • FutileRecipe@lemmy.world
            link
            fedilink
            arrow-up
            7
            arrow-down
            1
            ·
            edit-2
            10 months ago

            Except that this this has been debunked see below

            Edit: the point I’m hopefully making is that you’re just kinda saying stuff and not even bothering to post a source.