Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: What every browser knows about you

webkay.robinlinus.com

Post reply on HN
Print view View original

181–190 of 209 posts

Re: Show HN: What every browser knows about you

#181

Post by rvdm »

Some interesting things could happen if you where to start collecting every user's visit with a timestamp.

For example, ip address + timestamp + even a rough geo ip location could reveal travel patterns of users simply visiting your site.

Let's say those travel patterns include visits to nations less friendly to the US and you just might find out some details about someone ( or at least a certain IP ) they really wouldn't want you to know.

All you need is a web server and a little bit of javascript.

Re: Show HN: What every browser knows about you

#182

Post by userbinator »

ldjb wrote: post #152
chmike wrote: post #147

This inspired me the idea of creating a NoScript label for web sites that don't use javascript. It could be an information passed in the page header as a specification (contract). I have a few web sites without javascript. Is NoScript supported by iOS safari ?

I assume you're talking about the element (as opposed to something to do with the browser extension with a similar name)? In which case, it is definitely worth making websites as usable as possible without JavaScript. is supported by pretty much all web browsers, including iOS Safari. Even if your website relies heavily on JavaScript, it is still a good idea to let non-JavaScript users know via a element that JavaScr…

Seeing all the "This site requires JavaScript, please turn on JavaScript and refresh the page" messages I get makes me think of putting all your content in s, and then adding a script that writes "For your privacy and security, this site requires that your browser not run JavaScript. Please disable JavaScript and refresh the page." followed by links to sites explaining the bad side of JS-on-by-default and how to turn it off with things like NoScript.

Maybe it'll take off and people will understand, maybe not. But it's something worth pondering.

Re: Show HN: What every browser knows about you

#183

Post by chrismartin »

mkevac wrote: post #118
stephenr wrote: post #117

Earlier quoted context omitted.

I'm guessing you're talking about android? Apps on iOS don't prompt for permissions at install they prompt when they try to access something, eg photos, contacts, etc

They do that on Android too now.

Only for the very latest versions of Android OS that most people don't have and probably won't for several years due to Android's software distribution model.

Outside our tech filter bubble where we upgrade to a new flagship phone every year, millions of people use low-cost, prepaid, or hand-me-down phones that have long been on the market, and stopped receiving software updates years ago through the broken supply chain of AOSP -> device mfr -> carrier.

Re: Show HN: What every browser knows about you

#184

Post by throweway »

yxlx wrote: post #39

I found it interesting that it could read my battery level and discharging time. As for device orientation, I think I've seen that before but I had forgotten about it being possible.

Would be good for targeted ads for mobile charging stations. "Battery running low? Charge up opposite starbucks for $1. Look behind you!"

Re: Show HN: What every browser knows about you

#186

Post by gkya »

ryuuchin wrote: post #154

I see NoScript being recommended but if you're not using Firefox this isn't an option. Lukily both uBlock[1] and uMatrix[2] are cross platform and will work on most (any?) Chromium based browsers as well as Firefox. All instances of uBlock in this post are referring to uBlock Origin[1]. In addition to NoScript both uBlock[1] and uMatrix[2] can be configured to block javascript (you can block both 3rd and 1st party ja…

There's also Xombrero, a minimalist web browser on top of WebKit with whitelisting for JS, plugins and cookies. It's also keyboard oriented.

Re: Show HN: What every browser knows about you

#188

Post by Capira »

stephenr wrote: post #127
mojuba wrote: post #126

Earlier quoted context omitted.

Same here, it didn't detect some of the things it should have (theoretically?), e.g. AdBlock plug-in, Twitter & Co., and the EXIF data wasn't fully exposed. The geo location was wrong by some 70 miles, but that's a question of a proper geoip database I suppose. All in all, not very spooky with Safari at least.

I think it's specifically not GeoIP location - that doesn't require a browser to leak anything as its using your public IP address. I assume (because mine didn't show anything) that it's relying on the browser leaking it's device-detected location without prompting?

Right it does not use the HTML5 Geolocation GPS. It uses Google's Geolocation API to locate the user without asking for permission.

Re: Show HN: What every browser knows about you

#189

Post by hewhowhineth »

okket wrote: post #158
Too wrote: post #106

Earlier quoted context omitted.

Simply visiting a YouTube link should result in the video to start streaming right away though? How will you know that a download is desired or not?

> Simply visiting a YouTube link should result in the video to start streaming right away though? I hate that. Is there a reliable way to turn that behavior off?

If you're Firefox user go to 'about:config' and set 'media.autoplay.enabled' to false

Re: Show HN: What every browser knows about you

#190

Post by XzetaU8 »

voltagex_ wrote: post #175
ryuuchin wrote: post #164

Earlier quoted context omitted.

If you're only relying on the filter lists then you're at their mercy.

Without using NoScript, what else should I be doing?

Learn to use "Dynamic filtering" or check about the "Blocking Modes"for example, uBO's abilities far exceed those of your average adblocker that relies only on filterlists https://github.com/gorhill/uBlock/wiki
Post reply on HN