**Garrett LeSage** @garrett · 2017-12-30T23:00:59Z

Garrett LeSage @garrett

Garrett LeSage @garrett

Apparently ads are now scraping usernames and passwords that are autofilled thanks to password managers.

https://www.theverge.com/2017/12/30/16829804/browser-password-manager-adthink-princeton-research

(Use a password manger, but be sure auto-fill is off.)

Dec 30, 2017, 23:00 · Tusky · 40 · 18

**Máirín Duffy 🙋** @mairin@mastodon.social · Dec 30, 2017, 23:01

**Máirín Duffy 🙋** @mairin@mastodon.social · Dec 30, 2017, 23:01

@garrett
fuckkkkkkkkkkk

**Kyle R. Conway** @K_REY_C@mastodon.social · Dec 31, 2017, 05:33

**Kyle R. Conway** @K_REY_C@mastodon.social · Dec 31, 2017, 05:33

@mairin @garrett seriously gross. What password managers do people use? I've been using keepassx for a while now, but I'm always interested in alternative ideas here.

**Tim Harrison** @GreyLinux@mastodon.org.uk · Dec 31, 2017, 08:57

**Tim Harrison** @GreyLinux@mastodon.org.uk · Dec 31, 2017, 08:57

@K_REY_C @mairin @garrett
I use keepassdroid ( android )
And keepassx on Linux

**Google Whomst** @theoutrider@mastodon.social · Dec 30, 2017, 23:02

**Google Whomst** @theoutrider@mastodon.social · Dec 30, 2017, 23:02

@garrett also always, always use an ad blocker

**Julian Bond 🍸** @jbond@mastodon.social · Dec 31, 2017, 08:38

**Julian Bond 🍸** @jbond@mastodon.social · Dec 31, 2017, 08:38

@garrett Bangs head against wall.

So. It has come to this.

https://xkcd.com/1022/

**Tim Harrison** @GreyLinux@mastodon.org.uk · Dec 31, 2017, 08:56

**Tim Harrison** @GreyLinux@mastodon.org.uk · Dec 31, 2017, 08:56

@garrett thankyou for the info and now changed

**Gwmngilfen** @gwmngilfen@mastodon.org.uk · Dec 31, 2017, 10:31

**Gwmngilfen** @gwmngilfen@mastodon.org.uk · Dec 31, 2017, 10:31

@GreyLinux @garrett can recommend a desktop password manager (I use KeePassXC) since it (a) keeps the passwords away from the browser, (b) uses a global hotkey to trigger autofill (instead of being automatic) and best of all, then works for desktop applications and terminals too :)

**TheCapeGreek** @thecapegreek@mastodon.technology · Dec 31, 2017, 17:49

**TheCapeGreek** @thecapegreek@mastodon.technology · Dec 31, 2017, 17:49

@garrett
This is why we block ads!

**Yari, but digital** @Yarideki@cybre.space · Dec 31, 2017, 22:01

**Yari, but digital** @Yarideki@cybre.space · Dec 31, 2017, 22:01

@garrett The article mentions browser-based password managers, does this issue extend to standalone ones like KeePass that aren't inside the browser as well?

**Garrett LeSage** @garrett · Jan 01, 2018, 07:58

**Garrett LeSage** @garrett · Jan 01, 2018, 07:58

@Yarideki I recently read something else where Facebook and some ad networks are actively grabbing anything in the clipboard, so: yes, probably.

Filling in via active interaction is probably still safer than putting passwords in clipboards.

**Yari, but digital** @Yarideki@cybre.space · Jan 01, 2018, 13:36

**Yari, but digital** @Yarideki@cybre.space · Jan 01, 2018, 13:36

@garrett I don't doubt you but do you have a source so I could read more on that? Because quite honestly that's terrifying. Thank goodness I already use an ad blocker.