Live data from Hacker News

Retrieving your browsing history through a CAPTCHA

varun.ch

31–40 of 63 posts

Re: Retrieving your browsing history through a CAPTCHA

#33
post #15

Quoted post unavailable.

What is going on with those new accounts preaching against online privacy recently? Edit: For the lurkers trying to educate themselves, I recommend those resources: https://en.wikipedia.org/wiki/Nothing_to_hide_argument https://en.wikipedia.org/wiki/Citizenfour https://vimeo.com/nothingtohide

>What is going on with those new accounts preaching against online privacy recently?

From my experience (as I prefer freedom of information) if you are against privacy you tend to get downvoted. I think downvotes can lead to your account being rate limited which is annoying so it makes sense that people would want to use another account.

Re: Retrieving your browsing history through a CAPTCHA

#34
post #28

Earlier quoted context omitted.

You need js to extract the PI though?

You can do requests to the site using pure CSS as well, using something like `.site:visited { background-image: url(/logging/site); }`

those kind of tricks are already blocked by browsers, as the article explains

Re: Retrieving your browsing history through a CAPTCHA

#35
post #15

Quoted post unavailable.

What is going on with those new accounts preaching against online privacy recently? Edit: For the lurkers trying to educate themselves, I recommend those resources: https://en.wikipedia.org/wiki/Nothing_to_hide_argument https://en.wikipedia.org/wiki/Citizenfour https://vimeo.com/nothingtohide

No post body was provided.

Re: Retrieving your browsing history through a CAPTCHA

#37

I believe this is not a new concept. However, I applaud the accessibility, style and implementation of the proof-of-concept, given that the author seems to be only 15! Also sidenote: I like the creative and subtle plug for the author's 'Quickz' project (seems to be a Kahoot alternative - I have never heard of either) in the "not visited category". Keep up the good work!

Thank you! :)

Re: Retrieving your browsing history through a CAPTCHA

#39
post #12

Earlier quoted context omitted.

No, each square the user clicks could be a checkbox that is submitted to the backend as a form when they click done.

It could even just use CSS selectors to reveal an image or change a background image that results in a request to the backend.

Fortunately most browsers already have some measures to prevent that (https://developer.mozilla.org/en-US/docs/Web/CSS/Privacy_and...), the demo avoids automating the process altogether, and relies on tricking the visitor into 'voluntarily' telling if they've visited a site.

Re: Retrieving your browsing history through a CAPTCHA

#40
post #5

This is a terrible PI leak ... JS should really be disabled by default and only be enabled on sites that really need it and you somewhat trust.

It does not require js to work. In essense, it uses css styles to exploit visited links.

I had to enable js for it to work in firefox
Post reply on HN