Show HN: Your Social Media Fingerprint (maybe NSFW) • Hacker News Board

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#91

Post by trendia » Wed, Oct 12, 2016, 4:06 PM UTC

amelius wrote: post #40

Shouldn't a browser not send cookies when the request comes from a different domain? That would seem like the most sensible solution to me. Unless somebody can show a caveat of course.

I believe that cross-site scripting [0] can be used to get around domain restrictions.

[0] https://en.wikipedia.org/wiki/Cross-site_scripting

[1] (This is not my area of expertise. If I'm not correct... please let me know!)

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#92

Post by cookiecaper » Wed, Oct 12, 2016, 4:07 PM UTC

whamlastxmas wrote: post #76

cs0 wrote: post #10

Nice, so now by using this I have an NSFW site logged in my workplace's DNS log. Be careful if your employer checks such things.

Use a VPN like the rest of the savvy slackers.

Yes. If you do anything remotely personal on a work computer, use a VPN or some other type of encrypted tunnel (an SSH SOCKS tunnel + FoxyProxy makes a good poor man's VPN, and can usually be configured to allow seamless integration with internal resources going over the LAN and external going over the tunnel).

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#93

Post by mahyarm » Wed, Oct 12, 2016, 4:10 PM UTC

daleharvey wrote: post #60

zerognowl wrote: post #39

This is why I use 'browser isolation', which is a way to separate different types of surfing activity into different buckets. Currently the best way to do this in Firefox is to create multiple profiles, or in Chrome, you can simply add a different user/persona. Having one profile, or even an entire dedicated browser just for Twitter/FB ensures the login is not spilled over into other sites. If you're surfing the web…

Its only in testing right now, but Firefox Nightly has "Containers" so you can exactly have different "buckets" for different types of browsing - https://wiki.mozilla.org/Security/Contextual_Identity_Projec...

What I really want is something like this and it opening containers automatically based on url sets.

So going to facebook would go to the facebook set automatically and isolate facebook. But I don't have to manually open the "facebook profile" to do the switch. Same with twitter, amazon, google*, youtube, apple, etc.

If you have multiple accounts, you can have the interface pop up a "choose your subcontainer" automatically with the new google container or whatever. All browsing in that container would then stay in that subcontainer until you close it.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#94

Post by Declanomous » Wed, Oct 12, 2016, 4:16 PM UTC

cookiecaper wrote: post #92

whamlastxmas wrote: post #76

Earlier quoted context omitted.

Use a VPN like the rest of the savvy slackers.

Yes. If you do anything remotely personal on a work computer, use a VPN or some other type of encrypted tunnel (an SSH SOCKS tunnel + FoxyProxy makes a good poor man's VPN, and can usually be configured to allow seamless integration with internal resources going over the LAN and external going over the tunnel).

I'm more likely to get in trouble for creating a VPN than I would be for accidentally sending a DNS request to YouPorn. Our IT department is insane about data security, and running traffic through another VPN will cause them to drop everything to harass you for as long as it takes you to prove that you weren't leaking sensitive information.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#95

Post by eonw » Wed, Oct 12, 2016, 4:16 PM UTC

what is happening is not legal in the US and a large porn website was sued for doing it. they were printing hidden links on the page, then checking the color with JS to see if you had visited the destination url or not. judge didn't think it was a fair business practice. maybe these companies are not fixing this because of this legal precedent and figured no one was doing it?

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#96

Post by JTon » Wed, Oct 12, 2016, 4:23 PM UTC

diegorbaquero wrote: post #16

In Chrome: Settings > Privacy > Content Settings > Tick 'Block third-party cookies and site data' Also set 'Send a "Do Not Track" request with your browsing traffic' And install uBlock Origin, ofc.

Very nice. Here's how to do it on Firefox [1]

[1] https://support.mozilla.org/en-US/kb/disable-third-party-coo...

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#97

Post by dimino » Wed, Oct 12, 2016, 4:33 PM UTC

> without your consent

Untrue. I have given my consent. Why are these privacy posts always using some kind of nefarious and negative language?

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#98

Post by pbhjpbhj » Wed, Oct 12, 2016, 4:34 PM UTC

Scirra_Tom wrote: post #43

pbhjpbhj wrote: post #36

Earlier quoted context omitted.

Why is showing only pertinent share options unethical? Or is it the cross-site circumvention that you found unethical?

Ethics are subjective, some people may find the fact you're identifying what websites the user is logged into creatively in this way unethical as it divulges what services the user uses without them necessarily consenting/realising you have access to this information.

So, in one case you get a list of 10 share buttons, in another you get a list of 5 that you're logged in to already. The information doesn't leave your machine, it's your browser that discovers it and the information is presented to you - what in particular is your take in the ethical problem here? To me that's like a program arranging your contacts by order of use without explicit requesting permission to do so. The page is already causing your browser to request lots of URLs that you didn't explicitly allow.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#99

Post by anon4711 » Wed, Oct 12, 2016, 4:35 PM UTC

instakill wrote: post #26

Scary. Netflix is showing logged out though, whereas I'm actually still logged in.

Another false negative: Pinterest.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#100

Post by aquilaFiera » Wed, Oct 12, 2016, 4:37 PM UTC

zerognowl wrote: post #39

This is why I use 'browser isolation', which is a way to separate different types of surfing activity into different buckets. Currently the best way to do this in Firefox is to create multiple profiles, or in Chrome, you can simply add a different user/persona. Having one profile, or even an entire dedicated browser just for Twitter/FB ensures the login is not spilled over into other sites. If you're surfing the web…

Firefox Nightly has container tabs available right now and they are fantastic! Only thing missing is a shortcut / better way to open a different type of container tab.