This is a terrible PI leak ... JS should really be disabled by default and only be enabled on sites that really need it and you somewhat trust.
It does not require js to work. In essense, it uses css styles to exploit visited links.
Retrieving your browsing history through a CAPTCHA
11–20 of 63 posts
Re: Retrieving your browsing history through a CAPTCHA
#12Earlier quoted context omitted.
It does not require js to work. In essense, it uses css styles to exploit visited links.
But dont you need js to check for the styles to see if the link is visited?
Re: Retrieving your browsing history through a CAPTCHA
#13An earlier article about the visited CSS issue:
Re: Retrieving your browsing history through a CAPTCHA
#14Are there any extensions that protect from this?
I don't think you can defend against this by adding CSS rules, only removing them. Extensions would need to parse the entire CSS of a website and replace it, which would be cumbersome.
Re: Retrieving your browsing history through a CAPTCHA
#15Quoted post unavailable.
Edit: For the lurkers trying to educate themselves, I recommend those resources:
https://en.wikipedia.org/wiki/Nothing_to_hide_argument
Re: Retrieving your browsing history through a CAPTCHA
#16I rarely see websites that actually make use of `:visited` style as intended, it would be good if browsers had an option to just disable it and prevent this class of leaks completely.
Re: Retrieving your browsing history through a CAPTCHA
#17Quoted post unavailable.
What is going on with those new accounts preaching against online privacy recently? Edit: For the lurkers trying to educate themselves, I recommend those resources: https://en.wikipedia.org/wiki/Nothing_to_hide_argument https://en.wikipedia.org/wiki/Citizenfour https://vimeo.com/nothingtohide
Re: Retrieving your browsing history through a CAPTCHA
#18I rarely see websites that actually make use of `:visited` style as intended, it would be good if browsers had an option to just disable it and prevent this class of leaks completely.
I can see an option to always overridde the color with my choice.
Re: Retrieving your browsing history through a CAPTCHA
#19I rarely see websites that actually make use of `:visited` style as intended, it would be good if browsers had an option to just disable it and prevent this class of leaks completely.
I would've be opposed to a feature to disable it but I certainly wouldn't use it. I can imagine that Tor may want to enable it by default though.
Edit: Apparently Firefox has this feature and Tor does use it.
Re: Retrieving your browsing history through a CAPTCHA
#20I rarely see websites that actually make use of `:visited` style as intended, it would be good if browsers had an option to just disable it and prevent this class of leaks completely.
The last sentence of the article claims you do have that option, but I can't find it? I can see an option to always overridde the color with my choice.