Show HN: A Simple Website for Checking Cloudbleed from Browser's History
cloudbleed.github.io
Show HN: A Simple Website for Checking Cloudbleed from Browser's History
1–10 of 29 posts
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#2My first reaction when I read the title was that there is no way I'm giving my browser history to some arbitrary website.
But I see you're using the :visited pseudo-class. That's actually quite genius!
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#3Cool usecase for the css history feature :)
@author: Some sites are listed multiple times, like getbootstrap.com
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#4Cool usecase for the css history feature :) @author: Some sites are listed multiple times, like getbootstrap.com
Agreed, nice job!
Blockchain.info and coinbase.com also appear to be dupes in my listing.
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#5Neat.
FYI there are a bunch of duplicates, like Cloudflare itself, Hacker News, Medium, Codepen (just a few of the ones I've actually visited)
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#6Neat. FYI there are a bunch of duplicates, like Cloudflare itself, Hacker News, Medium, Codepen (just a few of the ones I've actually visited)
I noticed for me discord's site and laravel was also duplicated
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#7Would be interesting to see an extension with browser history access to search through your history for actual leaked data.
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#8Neat. FYI there are a bunch of duplicates, like Cloudflare itself, Hacker News, Medium, Codepen (just a few of the ones I've actually visited)
[deleted]
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#9My first reaction when I read the title was that there is no way I'm giving my browser history to some arbitrary website. But I see you're using the :visited pseudo-class. That's actually quite genius!
Right, so this site uses CSS selectors to show the user a different colour for each site they've visited.
In the past the site would also be able to access the different style information rendered by the browser and use it to find out which sites you'd visited. Luckily that privacy leak was patched up a while ago: https://blog.mozilla.org/security/2010/03/31/plugging-the-cs...
Now you'd have to do something like use timing attacks on the browser's cache... :)
Re: Show HN: A Simple Website for Checking Cloudbleed from Browser's History
#10My first reaction when I read the title was that there is no way I'm giving my browser history to some arbitrary website. But I see you're using the :visited pseudo-class. That's actually quite genius!
Right, so this site uses CSS selectors to show the user a different colour for each site they've visited. In the past the site would also be able to access the different style information rendered by the browser and use it to find out which sites you'd visited. Luckily that privacy leak was patched up a while ago: https://blog.mozilla.org/security/2010/03/31/plugging-the-cs... Now you'd have to do something like use…
Or, since you're encouraged to hover or click on each highlighted block, Javascript could leak your information once you interact. There's no protection from the human-in-the-loop leaking their own privacy.