Hacker News Reader

Comment by cm3 | Hacker News Reader

Definitely not since we've learned that (some) webpages send each keystroke while on the login page.

What is this referring to?

I believe this is referring to the ebay password submission that was on the front-page yesterday. The summary was that Ebay seemed to be sending each typed character of the password field back home.

At least eBay https://news.ycombinator.com/item?id=12000820 and Twitter https://news.ycombinator.com/item?id=12002103

> Facebook wants to know why you didn’t publish that status update you started writing.

> Unfortunately, the code in your browser that powers Facebook still knows what you typed—even if you decide not to publish it.* It turns out that the things you explicitly choose not to share aren't entirely private.

http://www.slate.com/articles/technology/future_tense/2013/1...

Reminds me of the Petraeus scandal where they communicated via unsent Gmail drafts in a shared account.

EDIT:

From https://en.wikipedia.org/wiki/Petraeus_scandal

    Petraeus and Broadwell used fake names to create free webmail accounts
    exchanging messages without encryption tools.
    They would share an email account, with one saving a message in the
    drafts folder and the other deleting it after reading it.

Brilliant

Wasn't that story thoroughly debunked? The data flows didn't support it, and Facebook denied it.

Reply on news.ycombinator.com