Live data from Hacker News

Show HN: How privacy-friendly is your site?

webbkoll.dataskydd.net

21–30 of 45 posts

Re: Show HN: How privacy-friendly is your site?

#21
Hey, I'm the main author of this. Happy to see that people like it!

As I wrote elsewhere in the comments we're planning to redesign the results page and rewrite all the text later this year. The current page hasn't changed much since mid-2016. Need to refresh/expand technical advice, be more clear about the limitations of the service, etc. I'll note down all suggestions here.

I'd also like recommend a similar project that was inspired by Webbkoll: https://privacyscore.org/ -- it's slower, but also integrates things like testssl.sh, and most importantly lets you make lists of URLs to check. It uses OpenWPM [0] which has been used for many interesting studies,[1] such as "Online Tracking: A 1-million-site Measurement and Analysis".[2] (Webbkoll uses Phoenix+Puppeteer)

[0] https://github.com/citp/OpenWPM

[1] https://webtransparency.cs.princeton.edu/webcensus/index.htm...

[2] http://senglehardt.com/papers/ccs16_online_tracking.pdf

Re: Show HN: How privacy-friendly is your site?

#22

newyorker.com 155 Cookies, 319 Third-party requests, 125 Third-parties contacted Beat it if you can :)

wired.com 133 Cookies, 353 Third-party requests, 132 Third-parties contacted Not a clear win, but also "impressive."

New champion: wired.com has sum of 618, newyorker.com 599

Re: Show HN: How privacy-friendly is your site?

#23

Hey, I'm the main author of this. Happy to see that people like it! As I wrote elsewhere in the comments we're planning to redesign the results page and rewrite all the text later this year. The current page hasn't changed much since mid-2016. Need to refresh/expand technical advice, be more clear about the limitations of the service, etc. I'll note down all suggestions here. I'd also like recommend a similar project…

Great tool. But if you'd have a list of top 10 checked sites at the top, say by sum of all three counters, it could actually bring some action, no one would like to be in this shame list.

Re: Show HN: How privacy-friendly is your site?

#27
Ran this against my service https://jsonip.com.

https://webbkoll.dataskydd.net/en/results?url=http%3A%2F%2Fj...

Pretty happy with the results. I have to have access to referrer headers for it to work.

Beyond that, there are some things I can tighten up in regards to some other xss headers so I’ll take care of those.

Also, I don’t keep traffic logs. Sometimes (maybe a couple times a year) I will do a small log capture for a few minutes if I need data to test an upgrade or feature experiment but that’s it.

Re: Show HN: How privacy-friendly is your site?

#30

Wouldn't it be fair to say that third-party requests aren't automatically a problem? For example, mozilla.org sends third-party requests to their CDN at mozilla.net, but it's the same parent company, so not really a third-party in the privacy sense.

For sure, it's just hard to tell them apart from a technical point of view. Tracking Preference Expression (DNT) [0] does make it possible with a Tracking Status Resource's same-party property [1], but it seems like almost nobody uses (or talks about) this. Medium.com is the only major site where I've seen it implemented: https://medium.com/.well-known/dnt/

[0] https://www.w3.org/TR/tracking-dnt/

[1] https://www.w3.org/TR/tracking-dnt/#rep.same-party

Post reply on HN