Hacker News new | past | comments | ask | show | jobs | submit login
Web Analytics Accidentally Collecting Passwords (freshpaint.io)
38 points by luu 84 days ago | hide | past | favorite | 8 comments



Have you ever accidentally typed your password into the username field and pressed enter? Now it is in some log somewhere.




I honestly can’t decide what I hate more: the fact that secret values can just be accessed by any JS on the page or that people keep using telemetry libraries and services. Probably the latter, but I am honestly not sure.


A tale as old as time. Medical records, passwords, private comms... Why even pretend it's a bug and not a feature at this point?


super sketchy that they chose to remove it seemingly knowing it was necessary...


[2020]


page 404ing?




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: