151–160 of 258 posts
Keep in mind that it doesn't show up the icons at all if you're using a content blocker and activated Fanboy’s Annoyance List. This is because the critical resource is named "/socialmedia-leak/socialmedia-leak.js".
https://github.com/easylist/easylist/commit/d39f815c794a89e4...
FYI, it's very NSFW in the back-end. Your browser is sending requests to obvious porn servers when you hit this link so it can test if you're logged in to them.
http://codepen.io/anon/pen/ALdqox/right/
This version connects to squareup.com, twitter.com, www.facebook.com, accounts.google.com, accounts.google.com, plus.google.com, login.skype.com, www.flickr.com, www.spotify.com, www.reddit.com, www.tumblr.com, www.expedia.de, www.dropbox.com, www.amazon.com, www.pinterest.com, www.netflix.com, de.foursquare.com, eu.battle.net, store.steampowered.com, www.academia.edu, stackoverflow.com, accounts.google.com, github.com, medium.com, news.ycombinator.com, carbonmade.com, courses.edx.org, www.spiegel.de, slack.com, www.khanacademy.org, www.paypal.com
Shouldn't a browser not send cookies when the request comes from a different domain? That would seem like the most sensible solution to me. Unless somebody can show a caveat of course.
I believe that cross-site scripting [0] can be used to get around domain restrictions. [0] https://en.wikipedia.org/wiki/Cross-site_scripting [1] (This is not my area of expertise. If I'm not correct... please let me know!)
Earlier quoted context omitted.
Any page could also embed anything else NSFW, such as actual porn videos. The assumption is that these sites are generally NSFW by association. What would you propose instead?
If a filter is set up to not just block access to but also flag based on something as trivial to embed as a URL one would hope the technology would be a little bit more involved than a single hit on a .ico file for a flag.
In Chrome: Settings > Privacy > Content Settings > Tick 'Block third-party cookies and site data' Also set 'Send a "Do Not Track" request with your browsing traffic' And install uBlock Origin, ofc.
Earlier quoted context omitted.
This only works of you have third party cookies turned on. I'm not sure about Opera, but I'm pretty sure Firefox has them off by default.
Firefox has third party cookies enabled by default, PLUS they hide the setting so you have to search for it to disable it. I'm 100% sure that they designed it that way to please Google. The pull requests to change it were ignored. And then they claim to be your partner in keeping your privacy. AFAIK only Safari has 3rd party cookies disabled by default. There are only very few sites that require 3rd party cookies. I…
And why would that be, if their deal with Google ended in 2014?
This is why I use 'browser isolation', which is a way to separate different types of surfing activity into different buckets. Currently the best way to do this in Firefox is to create multiple profiles, or in Chrome, you can simply add a different user/persona. Having one profile, or even an entire dedicated browser just for Twitter/FB ensures the login is not spilled over into other sites. If you're surfing the web…
At risk of being depressing, it's worth knowing that a dedicated profiler can reconcile accounts across all of the protections you've mentioned - not just as a targeted attack, but algorithmically. There are a lot of fingerprinting tricks which transcend cookie restrictions and user profiles. The battery percent/value one will reconcile all accounts on one device (as will several other like fonts). If you log into on…