according to the new york times, the flaw enabled keystroke logging software to be installed, making it an easy trick to steal identity information and passwords.
这个漏洞出现在浏览器里,允许按转键盘记录软件,因而用户很容易被骗取身份信息和密码。
keystroke logging is an invasion of privacy and stands on questionable legal grounds.