Every Keystroke You Make: A Tech-Law Measurement and Analysis of Event Listeners

28 lapcat 1 9/11/2025, 4:46:09 PM arxiv.org ↗

Comments (1)

dylan604 · 13m ago
"We find evidence that 38.52% websites installed third-party event listeners to intercept keystrokes, and that at least 3.18% websites transmitted intercepted information to a third-party server, which aligns with the criteria for wiretapping."

They say they autopopulate fields based on field type, but address fields are common to have an autocomplete feature enabled. That would require transmitting data before submitting the form. I didn't see anything about rating probabilities of the transmitted data being benign and useful or nefarious and malicious.