Skip to content
Research reports

Krebs on Security · Published 18 Nov

Be Very Sparing in Allowing Site Notifications

Excerpt

An increasing number of websites are asking visitors to approve “notifications,” browser modifications that periodically display messages on the user’s mobile or desktop device. In many cases these notifications are benign, but several dodgy firms are paying site owners to install their notification scripts and then selling that communications pathway to scammers and online hucksters.

Notification prompts in Firefox (left) and Google Chrome.

When a website you visit asks permission to send notifications and you approve the request, the resulting messages that pop up appear outside of the browser. For example, on Microsoft Windows systems they typically show up in the bottom rig…

The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Krebs on Security on krebsonsecurity.com.

Mentioned in the excerpt2

More from Krebs on Security1

Report pages show the excerpt, publisher and topics, then link out. CyberSIXT does not republish report bodies.

Updated AboutDevelopersSign in