Live data from Hacker News

Show HN: What every browser knows about you

webkay.robinlinus.com

121–130 of 209 posts

Re: Show HN: What every browser knows about you

#122
post #10

> Geo Coordinates: [lat,lng about 90 miles from the correct location] I find that error hilarious, because I setup correct in-addr.arpa and ip6.arpa reverse DNS entries for my (static) IP, which returns a domain name that has an accurate LOC record. My IP is two DNS queries away from my location (~10m precision), yet most of the time everyone uses these geoip databases instead of LOC.

Mine is 30km off. The address is a farm 3km from the headquarters of my ISP.

Re: Show HN: What every browser knows about you

#124
post #40

Earlier quoted context omitted.

This isn't based on external IP. This is using JavaScript to make requests inside your LAN.

Yeah I feel like samy.pl demonstrated this years ago, freaked me out and I have been running noscript ever since :D

Weirdly it's wrong for me, there's LAN IPs on the list that don't exist, and it's missing ones that do. Firefox on Ubuntu, with uBlock Origin, over WiFi.

Re: Show HN: What every browser knows about you

#125
post #118

Earlier quoted context omitted.

I'm guessing you're talking about android? Apps on iOS don't prompt for permissions at install they prompt when they try to access something, eg photos, contacts, etc

They do that on Android too now.

Uselessly so; many apps just crash if you deny them permissions. I'm looking at you, Hue.

Re: Show HN: What every browser knows about you

#126

So, literally all this said was: - "MacIntel" - some stuff from my User Agent string (changing it to IE11 made it think I'm on Windows 8) - my public IP, network provider and approx. downstream speed. I don't use Facebook or Google so I don't know if those things would have worked. None of the network scanning worked, it didn't use the geolocation stuff, etc. If Chrome/Firefox/IE do allow access to all/some of those…

Same here, it didn't detect some of the things it should have (theoretically?), e.g. AdBlock plug-in, Twitter & Co., and the EXIF data wasn't fully exposed. The geo location was wrong by some 70 miles, but that's a question of a proper geoip database I suppose.

All in all, not very spooky with Safari at least.

Re: Show HN: What every browser knows about you

#127
post #126

So, literally all this said was: - "MacIntel" - some stuff from my User Agent string (changing it to IE11 made it think I'm on Windows 8) - my public IP, network provider and approx. downstream speed. I don't use Facebook or Google so I don't know if those things would have worked. None of the network scanning worked, it didn't use the geolocation stuff, etc. If Chrome/Firefox/IE do allow access to all/some of those…

Same here, it didn't detect some of the things it should have (theoretically?), e.g. AdBlock plug-in, Twitter & Co., and the EXIF data wasn't fully exposed. The geo location was wrong by some 70 miles, but that's a question of a proper geoip database I suppose. All in all, not very spooky with Safari at least.

I think it's specifically not GeoIP location - that doesn't require a browser to leak anything as its using your public IP address.

I assume (because mine didn't show anything) that it's relying on the browser leaking it's device-detected location without prompting?

Re: Show HN: What every browser knows about you

#128

Not sure why battery is exposed; I guess that's the result of making browsers more like OSes. The only really annoying thing is the idiotic WebRTC settings. Their love for "data channels" with zero prompts, despite having no legitimate uses[1], ignores your proxy settings. This should be fixed. 1: I asked someone involved with WebRTC. They suggested "maybe a page wants to communicate with your fridge directly" as a s…

I am not sure if this battery is not just FUD and some other sections as well. Because I currently have no battery in my laptop (no battery detected) and site is saying "Charging: charging", "Battery level: 100%", "Charging time: 0h"

Re: Show HN: What every browser knows about you

#129

I visited the page once on my Android using my HN app's built-in webkit browser, where it displayed some interesting stats like the location, the battery level, ISP, etc. I opened the same link in Firefox Android with uBlock Origin installed, and got no hardware stats other than the kernel, no software stats, and no IP. My takeaway from this is to NEVER use an app that uses Webkit. I'm not sure if that was the intend…

> My takeaway from this is to NEVER use an app that uses Webkit

You're talking about WebKit on android, which was ported there by Google.

The original WebKit (as WebKit, not khtml) browser (Safari) doesn't leak all that information, so my take away would be not to trust a company obsessed with collecting private information and pushing all things into a browser, to have the best track record when it comes to protecting your privacy.

Re: Show HN: What every browser knows about you

#130
post #128

Not sure why battery is exposed; I guess that's the result of making browsers more like OSes. The only really annoying thing is the idiotic WebRTC settings. Their love for "data channels" with zero prompts, despite having no legitimate uses[1], ignores your proxy settings. This should be fixed. 1: I asked someone involved with WebRTC. They suggested "maybe a page wants to communicate with your fridge directly" as a s…

I am not sure if this battery is not just FUD and some other sections as well. Because I currently have no battery in my laptop (no battery detected) and site is saying "Charging: charging", "Battery level: 100%", "Charging time: 0h"

More likely, battery detection is just a little broken, like most of the supercharged, application delivery platform, content-powered Web 2.0.
Post reply on HN