The results are not consistent. Each time I click the button it keeps changing and also lists the wrong sites.
I too know the websites you visited
21–30 of 98 posts
Re: I too know the websites you visited
#22Mostly right for me except it didn't know I visited twitter and facebook (both tabs are open right now).
That's probably due to me blocking facebook and twitter widgets on sites other than Fb and twitter though.
Re: I too know the websites you visited
#23The results are not consistent. Each time I click the button it keeps changing and also lists the wrong sites.
A second try gives me a 'visited' result on almost every page (except techbuy).
The first try was pretty correct though.
Re: I too know the websites you visited
#24The other one worked fine on iOS. Yours failed all tests.
Re: I too know the websites you visited
#25I think it got 100% for me, on Safari/Mac. Note that it doesn't need to be 100% accurate to be effective. If it guesses better than 50% (i.e. coin flip), then it could be used to give guesses with at least some confidence. No different than analyzing any other noisy dataset. Because this all works client-side, it can also be done quite invisibly.
there is already way better and reliable methods to accomplish same goal. e.g http://ajaxian.com/archives/spyjax-using-avisited-to-test-yo...
I was under the impression that attempts had been made to hide any effects of :visited styles on the accessible DOM to stop this from working. There's a particularly good article on Mozilla's attempts [1], and the relevant bug on Bugzilla. [2]
Re: I too know the websites you visited
#26I think it got 100% for me, on Safari/Mac. Note that it doesn't need to be 100% accurate to be effective. If it guesses better than 50% (i.e. coin flip), then it could be used to give guesses with at least some confidence. No different than analyzing any other noisy dataset. Because this all works client-side, it can also be done quite invisibly.
there is already way better and reliable methods to accomplish same goal. e.g http://ajaxian.com/archives/spyjax-using-avisited-to-test-yo...
[deleted]
Re: I too know the websites you visited
#27What would be a possible use of this attack? I can't think of anything useful you'd do with knowing that you've visited Facebook. And so many people use sites like Facebook you might get a better success rate just always returning "visited" rather than measuring this way!
Re: I too know the websites you visited
#28Got three - one false positive. Firefox on linux
Re: I too know the websites you visited
#29Apparently the key to people not knowing where you visited is to use IE. It missed sites like Twitter and Facebook that are open for me all the time. It did get one site correct, HN ;<).
Re: I too know the websites you visited
#30Not even close, too. Instead of measuring load time, you can create " " elements verify their rendered color is the color you defined for visited links. It's a trick of old times...
a trick that all modern browsers have fixed