Live data from Hacker News

Show HN: What every browser knows about you

webkay.robinlinus.com

31–40 of 209 posts

Re: Show HN: What every browser knows about you

#31
post #20
post #15

Earlier quoted context omitted.

Sorry! Didn't think about that. It is fixed.

You should leave it in, if the whole point is to demonstrate the capabilities. It's incredible that a webpage can do that.

> It's incredible that a webpage can do that.

How so? Any site you navigate to knows your IP, and can take action based on that.

Re: Show HN: What every browser knows about you

#32
Between NoScript and Random Agent Spoofer, nothing is correct except my resolution and a couple of plug-ins (like Flash and VLC).

Shutting NoScript off doesn't make too much difference, and I don't think RAS does that much (some sites seem to see through it), so it must be one of the other addons (uBlock Origin, Disconnect, BetterPrivacy, HTTPS Everywhere).

Re: Show HN: What every browser knows about you

#34
For some reason, this worked really badly when I tried it. About the only things it figured out were that I run Linux on an x86_64 system and use Firefox. Well, it did get my ISP right, so that pretty much limits my location to a single country. Even my display resolution was not right. It did find quite a few devices on my network. All of them non-existent, though.

Re: Show HN: What every browser knows about you

#35
post #20

Earlier quoted context omitted.

You should leave it in, if the whole point is to demonstrate the capabilities. It's incredible that a webpage can do that.

> It's incredible that a webpage can do that. How so? Any site you navigate to knows your IP, and can take action based on that.

This isn't based on external IP. This is using JavaScript to make requests inside your LAN.

Re: Show HN: What every browser knows about you

#36
post #14

Scanning the visitor's /24 without notice, warning, or opportunity to opt out is a dick move. Our IDS probably just lit up like a Christmas tree.

Yup. I have a honeypot on my home network that hits Twilio when it gets poked at. So the author at least got my phone to light up.

At least you know it's working!

But yeah, I echo the other commenter wanting to know more about how you set that up.

Re: Show HN: What every browser knows about you

#40

Earlier quoted context omitted.

> It's incredible that a webpage can do that. How so? Any site you navigate to knows your IP, and can take action based on that.

This isn't based on external IP. This is using JavaScript to make requests inside your LAN.

Yeah I feel like samy.pl demonstrated this years ago, freaked me out and I have been running noscript ever since :D
Post reply on HN