No boundaries for user identities: Web trackers exploit browser login managers
Gunes Acar, Freedom to Tinker, 2017/12/27
The first item in this series, describing how websites record your sessions by tracking keyboard clicks and mouse movements - was an eye-opener. This article talks about how your browser betrays you. "Third-party scripts exploit browsers’ built-in login managers (also called password managers) to retrieve and exfiltrate user identifiers without user awareness." I tested it myself on their live demo page and it certainly appears to work. More...