CSS Keylogger

How is your paranoia recently?

The future is now.

youtube.com/watch?v=oJ6t7AImTdE

Other urls found in this thread:

github.com/maxchehab/CSS-Keylogging
youtu.be/oJ6t7AImTdE?t=405
addons.mozilla.org/en-US/firefox/addon/css-exfil-protection/
twitter.com/AnonBabble

github.com/maxchehab/CSS-Keylogging - POC, Chrome extension and Express server that exploits keylogging abilities of CSS.

computers were a mistake

Does it matter if you are sending your password to the site anyways?
If 3rd party css manages to fetch your password it can't send it anywhere. If you allow js they are already stealing your password so who cares.

Is your Javascript currently enabled?

In a world where people go to the same five websites year-round, this becomes a rarer situation.

[citation needed]

cool. i dont really type anything that is worth logging tho. also i bet that it will be added to this site too from some of the weird ad servers.

On the sites where I log in the first party scripts are generally enabled.

Fuck. Me. I really can't take this shit anymore.

It targets retarded normies that use the same password for everything.
This is great.

Tell me about it

Does Sup Forums x/appchan have CSS or is it all JS?

x = 3

Hahahahahahahahahhahaha

Nice.

blue board

youtu.be/oJ6t7AImTdE?t=405
better link for when he starts explaining skipping his life history

Pretty much this. As the video describes, it’s been around since 2012. The functionality to do this is inefficient and generally blocked by security filters.

It’s good for a web dev to know though

this is old as fuck new though
addons.mozilla.org/en-US/firefox/addon/css-exfil-protection/

>not disabling CSS

Why is he trying to sell it as a "cool" thing? This is creeping me out.

cool = new?

Great video.
Thanks OP.

Pretty sure this has been patched for a while.

Because knowledge is cool? The realization that this exists is the cool part. What don't you get? It's very cool, and something you ought to know about too.

Apple Macbook Pro doesn't have this problem.

Yeah, I'm certainly sure you'll enjoy it the next time you login to your most private accounts.

ofc it has

>old as fuck new