Warning of 3rd party session replay

Discussion of features in Mozilla Firefox
Post Reply
Asperamanca
Posts: 54
Joined: March 18th, 2005, 1:04 pm

Warning of 3rd party session replay

Post by Asperamanca »

I've read about a technology called "session replay" that uses 3rd party scripts to capture most or all input made by users of a webpage. That includes e.g. text that was pasted, but never sent. It also may include (due to misconfiguration) data such as credit card numbers or passwords. And it can bypass secure connections, if the 3rd party implementation is faulty.
The list of affected websites is pretty impressive, and includes a lot of popular sites.

More information here: https://webtransparency.cs.princeton.ed ... sites.html

My question: Are there features or add-ins that will warn me when I visit a site that uses such a 3rd party extension? Or that will simply cut off these scripts?
User avatar
therube
Posts: 21703
Joined: March 10th, 2004, 9:59 pm
Location: Maryland USA

Re: Warning of 3rd party session replay

Post by therube »

NoScript (but at present, forever?, the UI doesn't seem feasible to me. Might work for you.)
Likewise uMatrix, I would think (though I am not familiar with it, & it too is beyond me).
I believe it was mentioned that various ad blocking software lists have now added filters for this, so uBlock or Adblock Plus (with the filters in place) would do it, I would think.

You also might want to contact those sites that you visit, that do this to you, & [-X.
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
Post Reply