Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A web page that shows you everything the browser told it without asking

sinceyouarrived.world

Post reply on HN
Print view View original

71–80 of 309 posts

Re: A web page that shows you everything the browser told it without asking

#71

Post by corobo »

Dunno what it is with the wording but my brain started reading it in a bit of a "Hello Clarice" Hannibal Lecter style lol

>The specific combination of fonts on your device is nearly unique — like a fingerprint made of letters

Is this one true? I've not made any changes to fonts on my phone that I know of, wouldn't it just be bog standard iPhone fonts?

Curiosity not challenge

Would be cool if you actually did track just to prove the point like "you've opened this page 6 times now, 2 of those were via VPN and one time was using the Firefox Focus browser. Have you found any flaws in the data yet?"

Re: A web page that shows you everything the browser told it without asking

#72

Post by thesuitonym »

joshstrange wrote: post #37

It's somewhat interesting but over half of what it talked about is just silly. - Reverse IP/geocode (while be cute about "we won't show your IP", oh no, not my IP!) - Timezone - Ok, yeah, lots of websites need/make use of that for completely legit tasks - Browser/OS/Screen size - boring, again mostly needed or historical - GPU - Again, not super interesting IMHO - Battery - Ok, this is the first one I think should be…

I'm with you on almost all of this, but since you (almost) asked, here's how I think fonts should work:

The server tells your browser to display a line of text in a specific font. If that font is available, your browser does so, and if not, it displays the text in your default font, or a backup font if the developer specified one. There's no need for the server to know if it's there or not.

Re: A web page that shows you everything the browser told it without asking

#74

Post by mystraline »

BugsJustFindMe wrote: post #53
card_zero wrote: post #22

* I'm not in that city. * It's running a kind of Chrome on a kind of Linux, at a stretch. * Nobody can infer when I work and when I sleep. That includes me. * The recent, high-end display is the screen of a low-end tablet I bought in a supermarket five years ago. * But yes, browser fingerprinting is annoying. * Since you can detect light mode, would it kill you to honor it?

* That's the wrong battery percentage and the wrong charging status. > Since you can detect light mode, would it kill you to honor it? It would probably still be low contrast garbage even if it did. :/

> It would probably still be low contrast garbage even if it did. :/

My guess this is LLM slop website generation. And they forgot to prompt to include high contrast text... And the site owner cant make the changes without a sloperator.

Re: A web page that shows you everything the browser told it without asking

#75

Post by pixel_popping »

It's really bad, it's not using proper fingerprinting techniques, no network stack fingerprinting, no browser history via DNS poisoning, no narrowing down exact country with timing and so on. I mean this is even inferior from basic tools like amiunique, what's the point?

Re: A web page that shows you everything the browser told it without asking

#76

Post by InsideOutSanta »

lucideer wrote: post #48

The website is pretty & the overdramatic copy is fun, but there's much better fingerprinting demos out there. The number of data points shown here is low - there's plenty more it could be checking - & a good number of them seem to be wrong (it's only detecting one as explicitly "withheld" but I believe a few of them actually are, leading to garbled output). Needs some QA.

The overdramatic tone is pretty funny. "You are in [wrong city]. We could send a team on ninjas to kill you right now, but we chose not to. You are welcome."

Re: A web page that shows you everything the browser told it without asking

#77

Post by RHSeeger »

> We did not ask for your location. Your address arrived before you did.

Bunk. You asked a geolocation api/service to map my ip address back to a location. You _did_ ask for my location, using my IP as a key. And my IP is pretty much required in order for communication on the internet to work (outside of using services to hide it, but then _they_ have your info instead).

Post reply on HN