{"id":9904,"date":"2017-11-24T19:22:13","date_gmt":"2017-11-24T15:22:13","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/?p=9904"},"modified":"2020-02-26T19:00:03","modified_gmt":"2020-02-26T15:00:03","slug":"session-replay-scripts","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/session-replay-scripts\/9904\/","title":{"rendered":"Websites see everything you do"},"content":{"rendered":"<p>Some of the largest websites on the Internet use third-party software to track everything you do on their sites \u2014 including what you type, click, and scroll through.<\/p>\n<p>Basic website tracking \u2014 page views, searches \u2014 isn\u2019t news to anyone who pays attention to issues of online privacy and security. We\u2019ve discussed\u00a0<a href=\"https:\/\/usa.kaspersky.com\/blog\/web-tracking-in-numbers\/7123\/\" target=\"_blank\" rel=\"noopener\">website users being tracked<\/a>, and we also offer a useful primer series on\u00a0<a href=\"https:\/\/usa.kaspersky.com\/blog\/internet-ads-101\/7606\/\" target=\"_blank\" rel=\"noopener\">how Internet ads work<\/a>. The scope and depth of the tracking may unnerve even jaded readers, though. New research investigated the use of\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/Session_replay\" target=\"_blank\" rel=\"noopener nofollow\">session replay<\/a>\u00a0scripts, which track what exactly users do while browsing, on some of the Web\u2019s top sites.<\/p>\n<p><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2017\/11\/24062603\/website-tracking.jpg\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2017\/11\/24062603\/website-tracking-1024x672.jpg\" alt=\"\" width=\"1024\" height=\"672\" class=\"aligncenter size-large wp-image-20279\"><\/a><\/p>\n<p>These sites are capturing everything you type, mouse over, and click on. You know, sort of like a\u00a0<u><a href=\"https:\/\/www.kaspersky.co.uk\/blog\/keylogger\/1573\/\" target=\"_blank\" rel=\"noopener\">keylogger<\/a><\/u>. For performance diagnostics, some of it makes sense: When you run a website that can have hundreds of thousands of pages, you need to learn what people are doing on them and if any pages are broken or not working as intended.<\/p>\n<p>Problems arise, however, because the software is capable of tracking a great deal of information that isn\u2019t necessarily useful for website developers, and because third parties have access to that information. A group of researchers from Princeton University\u00a0<a href=\"https:\/\/freedom-to-tinker.com\/2017\/11\/15\/no-boundaries-exfiltration-of-personal-data-by-session-replay-scripts\/\" target=\"_blank\" rel=\"noopener nofollow\">reported on the phenomenon<\/a>, saying: <em>\u201c<i>Collection of page content by third-party replay scripts may cause sensitive information such as medical conditions, credit card details and other personal information displayed on a page to leak to the third-party as part of the recording. This may expose users to identity theft, online scams, and other unwanted behavior<\/i>.\u201d<\/em><\/p>\n<p>As the researchers also pointed out, this sort of playback software is <em>\u201clike somebody looking over your shoulder,\u201d<\/em> while you\u2019re online.\u00a0Watch the video below to learn more about how it works.<\/p>\n<p><span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" type=\"text\/html\" width=\"640\" height=\"390\" src=\"https:\/\/www.youtube.com\/embed\/l0Yc8s0DTZA?version=3&amp;rel=1&amp;fs=1&amp;showsearch=0&amp;showinfo=1&amp;iv_load_policy=1&amp;wmode=transparent\" frameborder=\"0\" allowfullscreen=\"true\"><\/iframe><\/span><\/p>\n<p>With that sort of recording also comes additional information that, if (or <em>when<\/em>) leaked, could be dangerous indeed. The research noted that this software has the ability to:<\/p>\n<ul>\n<li>Record passwords entered \u2014 and, although the developers tried to ensure that any password entered was redacted, it wasn\u2019t perfect, and it didn\u2019t work fully on mobile versions of sites.<\/li>\n<li>Capture sensitive data such as credit card numbers and dates of birth.<\/li>\n<li>Record data input into text boxes, even if that data isn\u2019t submitted to the site \u2014 in other words, even if you don\u2019t click \u201cSearch\u201d or \u201cSubmit\u201d or press Enter.<\/li>\n<\/ul>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kis-trial-privacy\">\n<p>So, what can you do to stop this sort of tracking? Our flagship protection \u2014\u00a0<a href=\"https:\/\/www.kaspersky.com\/advert\/multi-device-security?redef=1&amp;THRU&amp;reseller=gl_socmed_pro_ona_smm__onl_b2c_kasperskydaily_lnk____kismd___\" target=\"_blank\" rel=\"noopener nofollow\">Kaspersky Internet Security<\/a>\u00a0and\u00a0<a href=\"https:\/\/www.kaspersky.com\/advert\/total-security-multi-device?redef=1&amp;THRU&amp;reseller=gl_socmed_pro_ona_smm__onl_b2c_kasperskydaily_lnk____ktsmd___\" target=\"_blank\" rel=\"noopener nofollow\">Kaspersky Total Security<\/a>\u00a0\u2014 blocks it and many other kinds of tracking tools. We call this feature\u00a0<a href=\"https:\/\/www.kaspersky.com\/blog\/enhanced-privacy-kaspersky-2016\/9562\/\" target=\"_blank\" rel=\"noopener nofollow\">Private Browsing<\/a>, and if you value your online privacy you should give it a try.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Websites are logging your clicks, keystrokes, and more<\/p>\n","protected":false},"author":437,"featured_media":9905,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,1225],"tags":[781,180,1129,43,1040,1578,783,939],"class_list":{"0":"post-9904","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-privacy","9":"tag-ads","10":"tag-kaspersky-internet-security","11":"tag-keyloggers","12":"tag-privacy","13":"tag-private-browsing","14":"tag-session-replay-scripts","15":"tag-tracking","16":"tag-web"},"hreflang":[{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/session-replay-scripts\/9904\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/session-replay-scripts\/11891\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/session-replay-scripts\/14138\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/session-replay-scripts\/12336\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/session-replay-scripts\/12123\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/session-replay-scripts\/14885\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/session-replay-scripts\/14756\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/session-replay-scripts\/19301\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/session-replay-scripts\/4483\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/session-replay-scripts\/20282\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/session-replay-scripts\/9802\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/session-replay-scripts\/8574\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/session-replay-scripts\/15379\/"},{"hreflang":"zh","url":"https:\/\/www.kaspersky.com.cn\/blog\/session-replay-scripts\/8920\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/session-replay-scripts\/18840\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/session-replay-scripts\/19126\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/session-replay-scripts\/19119\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/me-en.kaspersky.com\/blog\/tag\/privacy\/","name":"privacy"},"_links":{"self":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/9904","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/437"}],"replies":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=9904"}],"version-history":[{"count":6,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/9904\/revisions"}],"predecessor-version":[{"id":16038,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/9904\/revisions\/16038"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/9905"}],"wp:attachment":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=9904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=9904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=9904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}