Slashdot is powered by your submissions, so send in your scoop

 


Forgot your password?
Close
typodupeerror
×
Privacy

Almost Every Website You Visit Records Exactly How Your Mouse Moves (medium.com) 89

Posted by EditorDavid from the I-know-what-you-clicked-last-summer dept.
Medium's technology blog OneZero reports that many websites today use a service that collects all of your mouse movements, enabling "replays" of every move.

"What surprised me was that the software even recorded when I shook my mouse around while deciding what to click on. It felt like observing digital body language." Session replay services have been around for over a decade and are widely used. One service, called FullStory, lists popular sites like Zillow, TeeSpring, and Jane as clients on its website. Another, called LogRocket, boasts Airbnb, Reddit, and CarFax, and a third called Inspectlet lists Shopify, ABC, and eBay among its users.

They bill themselves as tools for designing sites that are easy to use and increase desired user behavior, such as buying an item. If many users add items to their cart, but then abandon the purchase at a certain rough part of the checkout process, for instance, the service helps site owners figure out how to change the site's design to nudge users over the checkout line... FullStory even has a feature that tracks what it calls "rage clicks." This is when a user gets frustrated with a site and starts angrily clicking over and over.
In a semi-related story, a reporter for The Markup also recently discovered Amazon had apparently collected 90,000 rows of timestamped data about every tap they'd made on their Kindle.
This discussion has been archived. No new comments can be posted.

Almost Every Website You Visit Records Exactly How Your Mouse Moves More

Almost Every Website You Visit Records Exactly How Your Mouse Moves

Comments Filter:
  • If I seem to be moving my mouse in a confused and indecisive manner it's just my agitation at your website having been redesigned every time I visit. (Present company excepted of course.)

  • Trying to keep you on the page (Score:4, Informative)

    by olsmeister ( 1488789 ) on Saturday February 08, 2020 @05:41PM (#59705772)
    Seems like a lot of them will monitor your mouse movements and when you start heading for the top of the screen to close the tab, they pop up a window to try to talk you into staying.

    • Windows 7 users will feel right at home then.

      • What the hell are you talking about? I don't get any pop-ups at all.

        • Down at the bottom-right, the system always pops up messages saying "java needs updating" or "your vpn conection is active." Right above the clock.

          Try to mouse over to close the annoying popup, and it disappears just before the mouse reaches it.

  • So I get the coolest ads for all sorts of cool stuff I dream of being able to afford. Maybe they'll send me a winning lottery ticket...

  • Sounds like a job for some nice scripts (Score:5, Interesting)

    by bobstreo ( 1320787 ) on Saturday February 08, 2020 @05:50PM (#59705800)

    to automate, and feed fake data into this system.

    You could start with something like mouse jiggler. Use a separate browser that you don't use for anything else. bury their metrics in piles of bad data...

    • Re:Sounds like a job for some nice scripts (Score:4, Interesting)

      by ShanghaiBill ( 739463 ) on Saturday February 08, 2020 @06:18PM (#59705858)

      to automate, and feed fake data into this system.

      There are people working on this problem.

      The goal is to be able to use automation tools like Selenium on sites that block them with "I am not a robot" popups, which distinguish between human-generated mouse movements and software-generated mouse movements.

      • The "I'm not a robot" pop ups work by knowing you are logged in in google or FB or elsewhere ...
        A tablet has no mouse movement ...

        • No, they don't.

          Almost all of them use "recaptcha" which is a property of Google.

          But recaptcha could not care less what sites you are logged into.

          • Recaptcha knows that you are using google chrome and that you have visited plenty of sites like a human ...

            • That's Chrome, not Recaptcha per se.

              I mean, maybe they are designed to work together, but I seldom use Chrome, precisely for reasons like that.

              In fact in general I use Google products as seldom as I practically can.
      • I've been involved with trying to "solve" this problem for many years, being a specialist in website automation.

        It's a back-and-forth war. One side comes up with a solution, the other side alters their program to nullify it.

        And on it goes.
    • Or just browse on your phone, or any touch device really, which has no concept of a "mouse" or "mouse pointer".

      • Re:Sounds like a job for some nice scripts (Score:4, Informative)

        by bobstreo ( 1320787 ) on Saturday February 08, 2020 @06:29PM (#59705898)

        Or just browse on your phone, or any touch device really, which has no concept of a "mouse" or "mouse pointer".

        You did see the bottom of the summary where it says:

        "In a semi-related story, a reporter for The Markup also recently discovered Amazon had apparently collected 90,000 rows of timestamped data about every tap they'd made on their Kindle."

    • So your solution to client-side scripting tracking your mouse movements is more client-site scripting?

      Just don't allow javascript in the first place, unless you explicitly allow it.

  • Did anyone else... (Score:4, Funny)

    by umdesch4 ( 3036737 ) on Saturday February 08, 2020 @05:51PM (#59705802)
    ...start randomly moving their mouse around, and clicking all over the screen as they were reading this?
    • Hmm - I moved the mouse as if I were writing "go screw yourself"

    • I do that in general since when I read I follow my cursor. Drives the wife nuts when I compulsively click for no reason.

      • I do that in general since when I read I follow my cursor. Drives the wife nuts when I compulsively click for no reason.

        I'm old and I scan each line of text with my mouse as I read.

        I get parallax errors that confuse me as to what line I'm, currently on, and where the next begins when I'm at the far right.

        What I do is highlight a small segment of current text as sort of a bookmark. That way I can find the next line underneath that.

        I do the same thing when it's a long article and I have to pee. It's a placeholder.

        I'm sure my consistent behaviour is readily identifiable.

    • No, like a sensible person I only whitelist sites for JavaScript if it is absolutely necessary. NoScript is not just your friend, but your guardian. I really need a plugin that breaks the fingers of people who write this shit.
    • Don't people read pages using the page up/ page down keys any more?
  • ... that simulates mouse movements that spell out "FUCK YOU CREEPERS".

  • I can practice my drawing skills then as I make a giant FUCK YOU.

  • So, the fact that most of the web now is viewed on mobile devices...did this even occur to anyone? I just love it these days when websites have "mouseover" events. With what, my finger?

    • I have an old web app for home use that has mouseover UI elements. Buttons that appear on hover. I'm too lazy to reprogram it. A careful tap and slight drag will trigger mouseover anyway.

    • Pinging shitbook, twitter, and a dozen "Free"-to-play games every second is not "viewing the web on mobile devices".

  • Slow performance (Score:5, Insightful)

    by omnichad ( 1198475 ) on Saturday February 08, 2020 @06:13PM (#59705846) Homepage

    And this is one of many reasons why browsing the web requires way more system resources than it should. I don't want to go to Lynx or anything - I just don't want Chrome to eat more than 8GB of RAM and for web sites to be fast enough to operate on my phone, too. Is that too much to ask? Between tracking, resources loaded from 50+ domains, and video ads the web is a really annoying place these days. Popup or popunder windows almost seem quaint and unobtrusive.

    • I just don't want Chrome to eat more than 8GB of RAM

      I just saw (didn't read) about a Mac Pro with 1TB of RAM, and it was able to open 6,000 tabs and still be responsive and what-not.

      You've got 1TB of RAM and you're ONLY able to open 6 thousand tabs?

      Here it is. [9to5mac.com]

    • Re:Slow performance (Score:5, Informative)

      by AmiMoJo ( 196126 ) on Sunday February 09, 2020 @06:16AM (#59706918) Homepage Journal

      If you use uBlock Origin or a similar ad blocker then the popular EasyPrivacy filter list will kill this for you.

    • And this is one of many reasons why browsing the web requires way more system resources than it should. I don't want to go to Lynx or anything - I just don't want Chrome to eat more than 8GB of RAM and for web sites to be fast enough to operate on my phone, too. Is that too much to ask? Between tracking, resources loaded from 50+ domains, and video ads the web is a really annoying place these days. Popup or popunder windows almost seem quaint and unobtrusive.

      Yeah, when I navigate to a site, it's astounding the number of other sites riding shotgun and they all have to load successfully before I can make a soft landing.

  • And they STILL can't make a working web site (Score:5, Insightful)

    by Honk 1 ( 6593592 ) on Saturday February 08, 2020 @06:22PM (#59705878)
    If you idiots were able to record every synapse firing in my body while I use your web site, you still could not make a functional web site. It's like all competent web developers decided to quit at the turn of the century. I'd take an old Geocities web page over many a "modern" web site. Case in point, if your web site is just a white rectangle if Javascript is disabled, you have failed in life and should kill yourself.

    • Re: (Score:2)

      by tepples ( 727027 )

      Case in point, if your web site is just a white rectangle if Javascript is disabled, you have failed in life and should kill yourself.

      Would it be better if turning off JavaScript caused the website to display a link to download a matching native client installer?

    • Re:And they STILL can't make a working web site (Score:5, Informative)

      by LucasBC ( 1138637 ) on Saturday February 08, 2020 @07:18PM (#59705992)

      Happily, some of us still exist. I recently de-WordPress'ed one of our customer's websites into static HTML. While I was at it, I made sure it worked without JavaScript, even creating pop-up windows that worked with just HTML and CSS. Finally, I added back a little tiny bit of non-essential JavaScript for some progressive enhancement (smooth scrolling). In the end, the website that was once 1.2 GB as WordPress is now a nice little 1.7 MB HTML site that works for anyone and can't be hacked.

      I'm hoping someday there is a resurgence of this kind of development. The new techniques are not always better.

    • If you idiots were able to record every synapse firing in my body while I use your web site, you still could not make a functional web site. It's like all competent web developers decided to quit at the turn of the century.

      You sound like you're going for insightful, but the reality is broken websites are truly rare. Slow to load, yes, but pretty much every website out there not targeted at IE6 is perfectly functional save for the occasional CDN outage that is outside of the webmaster's control.

      I'd take an old Geocities web page over many a "modern" web site.

      Hyperbole makes any point you had weak and meaningless.

      Case in point, if your web site is just a white rectangle if Javascript is disabled, you have failed in life and should kill yourself.

      Indeed. The website should just display the text "Turn on Javascript and welcome to the year 2000. The internet isn't static text and graphics anymore."

      Do us a favour and disable Ja

      • Re:And they STILL can't make a working web site (Score:4, Informative)

        by UnknownSoldier ( 67820 ) on Saturday February 08, 2020 @07:51PM (#59706056)

        If your site "requires" Javascript to function it is a shit site that is more concerned with form then function.

      • Re:And they STILL can't make a working web site (Score:4, Interesting)

        by Honk 1 ( 6593592 ) on Saturday February 08, 2020 @08:09PM (#59706072)

        The internet isn't static text and graphics anymore.

        I stand by what I wrote. If your web site needs Javascript to show at all or to show pictures (above or below the fold), then you're a waste of oxygen. Comment posted with Javascript disabled, as requested.

        • You are missing half of the interesting stuff you can do with JavaScript ... e.g. single page web apps.

          • Re:And they STILL can't make a working web site (Score:5, Insightful)

            by Honk 1 ( 6593592 ) on Saturday February 08, 2020 @08:27PM (#59706096)
            Are you aware that a web page like that can display something even without Javascript, for example an explanation why I should care enough to allow it to execute code on my computer? Are you aware that many web pages which would work perfectly fine as completely static sets of files nowadays not only require Javascript to show at all, to show significant parts of the content or to have working on-site navigation, but also break if an external server isn't available? I can't even imagine what useless pieces of shit make disfunctional pages like that.

            • I'm pretty aware about the bullshit many websites do with javascript.

              But it seems you are not aware about what YOU actually could do with it if you were not blinded by your ignorance.

          • Semantically correct markup should render properly, with or without Javascript. One should have the option of "missing half the interesting stuff" without missing the content. Heck, some don't even have the option of enjoying it, for instance, the blind.

            I think that's the point Honk is trying to make. It's perfectly possible to make a single page web app, that also renders correctly when javascript is disabled (though clearly without the single page stuff.) His objection seems to be aimed towards devs who c

        • I called a guy an incel and a fuckstain the other day for using a site that needed javascript to show an image. A fucking image. What's wrong with the goddamn HTML tag that tells the browser "Render the data at this URL"?

    • Re: (Score:3)

      by gilgongo ( 57446 )

      "If you idiots were able to record every synapse firing in my body while I use your web site, you still could not make a functional web site."

      Designer here (currently termed "User Experience Designer"), mainly involved in interpreting research and coming up with interaction designs for software interfaces. I mainly work for large companies.

      Everywhere I've worked over the past 10 or 12 years has had some system that tracks mouse movements, page scrolls and whatnot. Sometimes per session, sometimes aggregated

      • Re: (Score:2)

        by gilgongo ( 57446 )

        Ugh, hungover Sunday. I meant to say anything that tells you what happened is orders of magnitude less useful in making a better product than something that tells you why it happened.

      • I didn't start working with web heat maps until 2006, I was a bit late to the game but needless to say, I've been religious about ad blocking and javascript blocking ever since. Prior to that, it was merely a strong interest and a deep concern.

  • I whitelist only the servers I trust with no script, and not any that are tied ad companies.

    • Re: (Score:1)

      by Anonymous Coward

      The new recaptcha does the same thing, so you would have to blacklist Google as well.

      • Re: (Score:2)

        by Sebby ( 238625 )

        so you would have to blacklist Google as well.

        Wouldn't be a bad idea for everyone to do that.

  • ... so they can be added to my blocklist?

  • Easy to solve for most sites (Score:5, Informative)

    by 93 Escort Wagon ( 326346 ) on Saturday February 08, 2020 @06:26PM (#59705890)

    If you don't allow third-party scripts, you prevent most of these sorts of data collectors to function.

    • Re: (Score:2)

      by antdude ( 79039 )

      Do I assume ad blockers already block these?

      • Re: (Score:1)

        by Anonymous Coward

        Do I assume ad blockers already block these?

        No, don't assume.

        This isn't content being served to your browser to be put on a blacklist, this is javascript callback functions sending 'user input' in response to events.
        ('User' in quotes as you personally may not desire this, but user in the context of your browser letting you click buttons links and also sending cords in a canvas)

        You'd need a script blocker that doesn't allow javascript to run unless sent from a domain you whitelist.

        Plus to be actually safe, this isn't a "install and forget" sort of thi

      • No, you probably need something additional. For iOS, the Firefox Focus app can do this if you enable it as a content blocker for Safari.

      • No, it would break all the "analytics" for web developers. You need additional protection. Typically, everybody is using a cloud-based service, so these will be third-party scripts that are automatically blocked with something like uBlock Origin.

        Adblockers are never enough by themselves, you always need an additional tool to prevent third party scripts. Otherwise you're an internet gloryhole.

  • Flagrant Bullshit (Score:4, Informative)

    by rahvin112 ( 446269 ) on Saturday February 08, 2020 @06:30PM (#59705902)

    Sure, I'll believe there are a bunch of secondary Javascripts running that track that stuff but I don't believe for a minute every site is running them. More importantly, none of them are running if you use an extension like no-script to shutdown all those scripts.

    • The sites that do run it tend to only run it on a small percentage of their users as well (Fullstory), because it's expensive.
  • I remember a while ago it was mentioned that Recaptcha was being altered so you shouldn't (most of the time) do anything beyond click the button to show that you are a real person. I'm guessing this might be tied into that to help with it telling who if real and who is a bot?

  • aaxads
    amazon tagsystem
    google tagservices
    Thats it.

  • Yeah itâ(TM)s possible but the information is not as interesting as you might think. I know first hand that one of the top 10 websites doesnâ(TM)t collecting mouse location data. It would be a huge resource sink for limited insights.

  • They record on which button I click?
    Preposterous!

  • Hello sir. May we come inside and have a talk with you about all your rage clicks?

  • Guess I will use the touchscreen more often on my Lenovo.

  • Vim style keybinds to navagare around in Firefox i never touch my mouse
  • Will it? Or is it baked right into the basic website and not loaded from a 3rd party domain?

  • Ok, time to roll some heads.

  • I love term "rage clicks." When somone clicks over and over on a goddamned button that doesn't work. If they could measure pressure, the fingers come down harder and harder and .....

  • I constantly click and select text while reading. Do i have rage issues? I usually notice rage, only if website starts opening some popups on my clicks

  • Not one of the listed sites appears on my "exceptions" list in NoScript, so they're getting the default blocking.

    But I did remove a couple of dozen OK'd sites for which I can't remember the reason for allowing. I should do that more often - weekly, not monthly.

Slashdot Top Deals

Living on Earth may be expensive, but it includes an annual free trip around the Sun.

Close