Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Retrieving your browsing history through a CAPTCHA

varun.ch

Post reply on HN
Print view View original

1–10 of 63 posts

Re: Retrieving your browsing history through a CAPTCHA

#8

Post by shusaku »

Anunayj wrote: post #2

Are there any extensions that protect from this?

Basically the only defense is an extension that prevents styling for a visited link. But on the plus side to use this exploit you either need to be very specific about what sites you check or have the user clicking lots of links…

Re: Retrieving your browsing history through a CAPTCHA

#9

Post by zinekeller »

cabirum wrote: post #5
rightbyte wrote: post #3

This is a terrible PI leak ... JS should really be disabled by default and only be enabled on sites that really need it and you somewhat trust.

It does not require js to work. In essense, it uses css styles to exploit visited links.

Also, lying the visited state on JS was implemented as early as Firefox 4 - so it is definitely not a JS-dependent "exploit" (rather, it's a rather oblique way of social engineering).

Re: Retrieving your browsing history through a CAPTCHA

#10

Post by PetahNZ »

cabirum wrote: post #5
rightbyte wrote: post #3

This is a terrible PI leak ... JS should really be disabled by default and only be enabled on sites that really need it and you somewhat trust.

It does not require js to work. In essense, it uses css styles to exploit visited links.

But dont you need js to check for the styles to see if the link is visited?
Post reply on HN