> *Following up on this, I found an article[0] claiming that it isn't really an ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		dngray on May 8, 2019 \| parent \| context \| favorite \| on: Css-only-chat: A truly monstrous async web chat us... > Following up on this, I found an article[0] claiming that it isn't really an issue since a pure CSS keylogger can only catch one character. That reminds me of: • Stealing Data With CSS: Attack and Defense https://www.mike-gualtieri.com/posts/stealing-data-with-css-... • CSS Exfil Vulnerability Tester https://www.mike-gualtieri.com/css-exfil-vulnerability-teste... • CSS Exfil Protection (Firefox) https://addons.mozilla.org/en-US/firefox/addon/css-exfil-pro... • CSS Exfil Protection (Chrome) https://chrome.google.com/webstore/detail/css-exfil-protecti... Never really got much coverage. It's not mitigated by uBlock or uMatrix (unless you deny all CSS).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact