Didn't work on Opera on Linux (said I never visited any of those sites)
I too know the websites you visited
31–40 of 98 posts
Re: I too know the websites you visited
#32http://ajaxian.com/archives/spyjax-using-avisited-to-test-yo... come on...
as mentioned elsewhere in this thread, that loophole has been closed by all modern browsers. not to say there aren't other ways to get at that information, but it's not as simple as checking the color of a link anymore.
Re: I too know the websites you visited
#33Missed about 75% for me.
Re: I too know the websites you visited
#34What would be a possible use of this attack? I can't think of anything useful you'd do with knowing that you've visited Facebook. And so many people use sites like Facebook you might get a better success rate just always returning "visited" rather than measuring this way!
If a malicious website can tell which banking websites you have visited, it can show a phishing page that looks just like your bank.
Re: I too know the websites you visited
#35Did not work at all for me. The other one had slightly better results. Win 7 on most recent FF.
Re: I too know the websites you visited
#36Fails for me on Safari 5.1.2 / OS X. It got 1 site right, 1 site wrong, the rest being "not visited".
Re: I too know the websites you visited
#37RequestPolicy prevents that approach.
Re: I too know the websites you visited
#38[deleted]
Re: I too know the websites you visited
#39Not even close, while all the sites it said I visited, I had, it missed tons of other sites I'd visited.
Same here. There were 3 correct positives listed, and I had about 7 or 8 false negatives.
Re: I too know the websites you visited
#40Throwaway account. My company created an analytics product around the ability to track which sites your visitors have visited. It used a different and (at the time) more reliable technique.
About a year after the product launch we were contacted by a powerful washington based lobby group and they wanted to chat. They felt it violated a site visitor's "reasonable expectation of privacy". I agreed. So we pulled the feature and dodged a bullet as this "browser bug" hit the mainstream press a few months later. The feature wasn't a major part of our product's value prop, few of our customers used it and none missed it.
So if you're thinking about basing a startup on this, don't. You will get a call very quickly from organizations much larger than you are asking awkward questions.