📜 ⬆️ ⬇️

Phishing is now legalized in the Russian Federation? Answer of Roskomnadzor unleashes hands to Click Jacks

I was very interested in the service socfishing.ru. I was interested both in the fact that my data is being transferred to some third- generation " hoaxers " without my knowledge, and also that these "third parties" are LLCs registered in the territory of the Russian Federation, acting openly and without embarrassment to anyone. I was also curious, of course, that, it turns out, it can be done just like that with the help of various tricks, starting with clickjacking, ending with all sorts of browser-based extensions, taking the profiles of social networks and just stupidly selling officially. Yes, do not use cleverly in advertising settings, increasing the relevance of advertising and increasing sales, without asking permission, but just like that - take and sell in the open.

"One hundred social profiles on the dead man's chest, yohohoho, blackjack and courtesan"

Under the cut request to Roskomnadzor and the answer, which can actually be used as an indulgence for phishing.

Not to annoy this office, but to determine the state’s attitude to such actions (as an understanding of whether I can use this in my work without violating the law) I wrote a letter to Roskomnadzor on their website in order to clarify the essence of the violation of the law “On Personal data ”and their sale to third parties. In fact, my question is, if you shorten the letter in one line, it was as follows: “Here is the company, it’s not clear how to get personal data, perhaps with the help of clickjacking (the links are supposed to be here, here’s how it is done), please clarify the legality of these actions.”
')
The answer surprised me, although not to say that very strongly, knowing the state in which we all live. However, the conclusion of the answer, of course, suggests a staggering one.

image

Source: https://habr.com/ru/post/284916/


All Articles