# LANGUAGE translation of https://www.gnu.org/proprietary/malware-webpages.html # Copyright (C) YEAR Free Software Foundation, Inc. # This file is distributed under the same license as the original article. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: malware-webpages.html\n" "POT-Creation-Date: 2025-03-11 14:26+0000\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "Language: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #. type: Content of: msgid "Malware in Webpages - GNU Project - Free Software Foundation" msgstr "" #. type: Content of: <div><a> msgid "<a id=\"side-menu-button\" class=\"switch\" href=\"#navlinks\">" msgstr "" #. type: Attribute 'title' of: <div><a><img> msgid "Section contents" msgstr "" #. type: Attribute 'alt' of: <div><a><img> msgid " [Section contents] " msgstr "" #. type: Content of: <div> msgid "</a>" msgstr "" #. type: Content of: <div><p><a> msgid "<a href=\"/\">" msgstr "" #. type: Attribute 'title' of: <div><p><a><img> msgid "GNU Home" msgstr "" #. type: Content of: <div><p> msgid "" "</a> / <a href=\"/proprietary/proprietary.html\">Malware</a> / By " "product /" msgstr "" #. type: Content of: <div><h2> msgid "Malware in Webpages" msgstr "" #. type: Content of: <div><div><p> msgid "" "Nonfree (proprietary) software is very often malware (designed to mistreat " "the user). Nonfree software is controlled by its developers, which puts them " "in a position of power over the users; <a " "href=\"/philosophy/free-software-even-more-important.html\">that is the " "basic injustice</a>. The developers and manufacturers often exercise that " "power to the detriment of the users they ought to serve." msgstr "" #. type: Content of: <div><div><p> msgid "This typically takes the form of malicious functionalities." msgstr "" #. type: Content of: <div><div><p> msgid "" "This page lists web sites containing proprietary JavaScript programs that " "spy on users or mislead them. They make use of what we call the <a " "href=\"/philosophy/javascript-trap.html\">JavaScript Trap</a>. Of course, " "many sites collect information that the user sends, via forms or otherwise, " "but here we're not talking about that." msgstr "" #. type: Content of: <div><div><div><p> msgid "" "If you know of an example that ought to be in this page but isn't here, " "please write to <a " "href=\"mailto:webmasters@gnu.org\"><webmasters@gnu.org></a> to inform " "us. Please include the URL of a trustworthy reference or two to serve as " "specific substantiation." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The US government <a " "href=\"https://themarkup.org/pixel-hunt/2022/04/28/applied-for-student-aid-online-facebook-saw-you\">sent " "personal data to Facebook</a> for every college student that applied for US " "government student aid. It justified this as being for a " "“campaign.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The data included name, phone number and email address. This shows the " "agency didn't even make a handwaving attempt to anonymize the student. Not " "that anonymization usually does much good—but the failure to even try " "shows that the agency was completely blind to the issue of respecting " "students' privacy." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Markup investigated 80,000 popular web sites and <a " "href=\"https://themarkup.org/blacklight/2020/09/22/blacklight-tracking-advertisers-digital-privacy-sensitive-websites\"> " "reports on how much they snoop on users</a>. Almost 70,000 had third-party " "trackers. 5,000 fingerprinted the browser to identify users. 12,000 " "recorded the user's mouse clicks and movements." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites use JavaScript code <a " "href=\"https://gizmodo.com/before-you-hit-submit-this-company-has-already-logge-1795906081\"> " "to snoop on information that users have typed into a form but not sent</a>, " "in order to learn their identity. Some are <a " "href=\"https://www.manatt.com/insights/newsletters/advertising-law/sites-illegally-tracked-consumers-new-suits-allege\"> " "getting sued</a> for this." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The chat facilities of some customer services use the same sort of malware " "to <a " "href=\"https://gizmodo.com/be-warned-customer-service-agents-can-see-what-youre-t-1830688119\"> " "read what the user is typing before it is posted</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "British Airways used <a " "href=\"https://www.theverge.com/2018/7/19/17591732/british-airways-gdpr-compliance-twitter-personal-data-security\">nonfree " "JavaScript on its web site to give other companies personal data on its " "customers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "The Verify browser extension by Storyful <a " "href=\"https://www.theguardian.com/world/2018/may/17/revealed-how-storyful-uses-tool-monitor-what-journalists-watch\">spies " "on the reporters that use it</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A cracker used an exploit in outdated software to <a " "href=\"https://www.pcmag.com/news/400-websites-secretly-served-cryptocurrency-miners-to-visitors\"> " "inject a “miner” in web pages</a> served to visitors. This type " "of malware hijacks the computer's processor to mine a cryptocurrency." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "<small>(Note that the article refers to the infected software as " "“content management system”. A better term would be “<a " "href=\"/philosophy/words-to-avoid.html#Content\">website revision " "system</a>”.)</small>" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Since the miner was a nonfree JavaScript program, visitors wouldn't have " "been affected if they had used <a " "href=\"/software/librejs/index.html\">LibreJS</a>. Some browser extensions " "that <a " "href=\"https://www.cnet.com/tech/computing/how-to-stop-sites-from-using-your-cpu-to-mine-coins/\"> " "specifically block JavaScript miners</a> are also available." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Google's ad platform enabled advertisers to <a " "href=\"https://arstechnica.com/information-technology/2018/01/now-even-youtube-serves-ads-with-cpu-draining-cryptocurrency-miners/\"> " "run cryptocurrency miner code on the computers of YouTube users through " "proprietary JavaScript</a>. Some people noticed this, and the outrage made " "Google remove the miners, but the number of affected users was probably very " "high." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some JavaScript malware <a " "href=\"https://www.theverge.com/2017/12/30/16829804/browser-password-manager-adthink-princeton-research\"> " "swipes usernames from browser-based password managers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Some websites send JavaScript code to collect all the user's input, <a " "href=\"https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfiltration-of-personal-data-by-session-replay-scripts/\">which " "can then be used to reproduce the whole session</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "If you use LibreJS, it will block that malicious JavaScript code." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "When a page uses Disqus for comments, the proprietary Disqus software <a " "href=\"https://blog.dantup.com/2017/01/visiting-a-site-that-uses-disqus-comments-when-not-logged-in-sends-the-url-to-facebook/\">loads " "a Facebook software package into the browser of every anonymous visitor to " "the page, and makes the page's URL available to Facebook</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Online sales, with tracking and surveillance of customers, <a " "href=\"https://www.theguardian.com/commentisfree/2016/dec/06/cookie-monsters-why-your-browsing-history-could-mean-rip-off-prices\">enables " "businesses to show different people different prices</a>. Most of the " "tracking is done by recording interactions with servers, but proprietary " "software contributes." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "A <a " "href=\"https://research.csiro.au/isp/wp-content/uploads/sites/106/2016/08/paper-1.pdf\"> " "research paper</a> that investigated the privacy and security of 283 Android " "VPN apps concluded that “in spite of the promises for privacy, " "security, and anonymity given by the majority of VPN apps—millions of " "users may be unawarely subject to poor security guarantees and abusive " "practices inflicted by VPN apps.”" msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Here are two examples, taken from the research paper, of proprietary VPN " "apps that use JavaScript to track users and infringe their privacy:" msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "VPN Services HotspotShield" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Injects JavaScript code into the HTML pages returned to the users. The " "stated purpose of the JS injection is to display ads. Uses roughly five " "tracking libraries. Also, it redirects the user's traffic through " "valueclick.com (an advertising website)." msgstr "" #. type: Content of: <div><div><ul><li><dl><dt> msgid "WiFi Protector VPN" msgstr "" #. type: Content of: <div><div><ul><li><dl><dd> msgid "" "Injects JavaScript code into HTML pages, and also uses roughly five tracking " "libraries. Developers of this app have confirmed that the non-premium " "version of the app does JavaScript injection for tracking the user and " "displaying ads." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "E-books can contain JavaScript code, and <a " "href=\"https://www.theguardian.com/books/2016/mar/08/men-make-up-their-minds-about-books-faster-than-women-study-finds\"> " "sometimes this code snoops on readers</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Flash and JavaScript are used for <a " "href=\"https://arstechnica.com/information-technology/2013/10/top-sites-and-maybe-the-nsa-track-users-with-device-fingerprinting/\"> " "“fingerprinting” devices</a> to identify users." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites rat their visitors to advertising networks that track users. " "Of the top 1000 web sites, <a " "href=\"https://www.law.berkeley.edu/research/bclt/research/privacy-at-bclt/web-privacy-census/\">84% " "(as of 5/17/2012) fed their visitors third-party cookies, allowing other " "sites to track them</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites report all their visitors to Google by using the Google " "Analytics service, which <a " "href=\"https://www.pcworld.com/article/460787/google_analytics_breaks_norwegian_privacy_laws_local_agency_said.html\"> " "tells Google the IP address and the page that was visited</a>." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Many web sites try to collect users' address books (the user's list of other " "people's phone numbers or email addresses). This violates the privacy of " "those other people." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Pages that contain “Like” buttons <a " "href=\"https://www.smh.com.au/technology/facebooks-privacy-lie-aussie-exposes-tracking-as-new-patent-uncovered-20111004-1l61i.html\"> " "enable Facebook to track visitors to those pages</a>—even users that " "don't have Facebook accounts." msgstr "" #. type: Content of: <div><div><ul><li><p> msgid "" "Flash Player's <a " "href=\"https://web.archive.org/web/20200808151607/http://www.imasuper.com/2008/10/09/flash-cookies-the-silent-privacy-killer/\"> " "cookie feature helps web sites track visitors</a>." msgstr "" #. TRANSLATORS: Use space (SPC) as msgstr if you don't have notes. #. type: Content of: <div><div> msgid "*GNUN-SLOT: TRANSLATOR'S NOTES*" msgstr "" #. type: Content of: <div><div><p> msgid "" "Please send general FSF & GNU inquiries to <a " "href=\"mailto:gnu@gnu.org\"><gnu@gnu.org></a>. There are also <a " "href=\"/contact/\">other ways to contact</a> the FSF. Broken links and " "other corrections or suggestions can be sent to <a " "href=\"mailto:webmasters@gnu.org\"><webmasters@gnu.org></a>." msgstr "" #. TRANSLATORS: Ignore the original text in this paragraph, #. replace it with the translation of these two: # #. We work hard and do our best to provide accurate, good quality #. translations. However, we are not exempt from imperfection. #. Please send your comments and general suggestions in this regard #. to <a href="mailto:web-translators@gnu.org"> # #. <web-translators@gnu.org></a>.</p> # #. <p>For information on coordinating and contributing translations of #. our web pages, see <a #. href="/server/standards/README.translations.html">Translations #. README</a>. #. type: Content of: <div><div><p> msgid "" "Please see the <a " "href=\"/server/standards/README.translations.html\">Translations README</a> " "for information on coordinating and contributing translations of this " "article." msgstr "" #. type: Content of: <div><p> msgid "Copyright © 2017-2023, 2025 Free Software Foundation, Inc." msgstr "" #. type: Content of: <div><p> msgid "" "This page is licensed under a <a rel=\"license\" " "href=\"http://creativecommons.org/licenses/by/4.0/\">Creative Commons " "Attribution 4.0 International License</a>." msgstr "" #. TRANSLATORS: Use space (SPC) as msgstr if you don't want credits. #. type: Content of: <div><div> msgid "*GNUN-SLOT: TRANSLATOR'S CREDITS*" msgstr "" #. timestamp start #. type: Content of: <div><p> msgid "Updated:" msgstr ""