Is there a noscript equivalent for other browsers apart from firefox? Most of the recommendations were "noscript". And I had a lot of info leaking.
The closest and similar to noscript i can think of is "uMatrix"
Show HN: What every browser knows about you
141–150 of 209 posts
Re: Show HN: What every browser knows about you
#142The clickjacking is the only one that surprised me. Very unnerving. Need to read more about it.
Re: Show HN: What every browser knows about you
#143OS X 10.11.4: Safari 9.1 : Minimal HW/SW detection, No social media leak, No network scan (after click) Safari 9.1.1 (Tech Preview) : Minimal HW/SW detection, No social media leak, No network scan (after click) Chrome 49.0.2623.110 : Full HW/SW detection, Social media login detected, Network scanning (after click) Firefox 45.0.1 : Full HW/SW detection, Social media login detected, Network scanning (after click)
Safari 9.1 and 9.1.1 leaked my social media logins. Also 9.1.1 said "MacIntel, 4 cores" while 9.1 left out the amount of cores.
Also, my machine only has two physical cores, so 9.1.1 leaked physical + virtual
Re: Show HN: What every browser knows about you
#144I found it interesting that it could read my battery level and discharging time. As for device orientation, I think I've seen that before but I had forgotten about it being possible.
This is a pretty cool browser game that uses device orientation and websockets: https://lightsaber.withgoogle.com
Why not asking for permission as is the case for location ?
Re: Show HN: What every browser knows about you
#145glad to see that I leaked precisely zero of those.
Thanks NoScript
Re: Show HN: What every browser knows about you
#146The speedtest http://webkay.robinlinus.com/scripts/speedtest.js downloads a 5mb file from http://www.kenrockwell.com/contax/images/g2/examples/3112003... . You might want to change that to something on a big company CDN to avoid killing kenrockwell.com's server.
Thanks a lot for the feedback! I changed it to https://upload.wikimedia.org/wikipedia/commons/2/2d/Snake_Ri... for now. Can you suggest a better image?
Re: Show HN: What every browser knows about you
#147This inspired me the idea of creating a NoScript label for web sites that don't use javascript. It could be an information passed in the page header as a specification (contract). I have a few web sites without javascript.
Is NoScript supported by iOS safari ?
Re: Show HN: What every browser knows about you
#148Earlier quoted context omitted.
No, it doesn't just use a different protocol. It ignores your network settings (proxy) and exposes your local network information. I can understand not wanting to scare people with "Allow P2P Data Channel", but ignoring proxy settings and revealing all IPs is unacceptable. WebRTC folks toss off these concerns with "there's no way to prevent tracking so heh".
Visiting a link exposes also a lot on default. Browser, OS, Resolution. The major browsers are not build for this needs. Best experience first. BTW: There are extensions to block webrtc ip leak.
> Visiting a link exposes also a lot on default.
We should be reducing the amount of data exposed and fixing the mistakes of the past that allowed so much data to be easily exfiltrated.
> Best experience first.
"Best" is not a defined term. What software developers should (always) be providing is the safest method first. Fancy UI tricks are a far lower priority than safety. If there is any doubt, fail safely.
Anybody that isn't putting safety first is being incredibly irresponsible. Stop leaking data and design for safety and security first. Yes, this it will be harder to make a nice user experience. In time, this will improve, but in the meantime safety is not something that can simply be ignored.
> extensions
Safety is not an optional feature that only some people should have.
Re: Show HN: What every browser knows about you
#149Not sure why battery is exposed; I guess that's the result of making browsers more like OSes. The only really annoying thing is the idiotic WebRTC settings. Their love for "data channels" with zero prompts, despite having no legitimate uses[1], ignores your proxy settings. This should be fixed. 1: I asked someone involved with WebRTC. They suggested "maybe a page wants to communicate with your fridge directly" as a s…
Battery levels are exposed in the Battery Status API [1] which is currently implemented on Firefox and Chrome, both desktop and Android editions [2] but not on iOS.
1. https://developer.mozilla.org/en/docs/Web/API/Battery_Status...
Re: Show HN: What every browser knows about you
#150Got my location wrong by about 50 miles
mine was accurate to about 30 meters, on a wired connection.