Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A web page that shows you everything the browser told it without asking

sinceyouarrived.world

Post reply on HN
Print view View original

191–200 of 309 posts

Re: A web page that shows you everything the browser told it without asking

#191

Post by sgbeal »

quietsegfault wrote: post #169
card_zero wrote: post #22

* I'm not in that city. * It's running a kind of Chrome on a kind of Linux, at a stretch. * Nobody can infer when I work and when I sleep. That includes me. * The recent, high-end display is the screen of a low-end tablet I bought in a supermarket five years ago. * But yes, browser fingerprinting is annoying. * Since you can detect light mode, would it kill you to honor it?

> Nobody can infer when I work and when I sleep. That includes me. Are you like /severed/ or something? Surely you can infer when you work and sleep from your experience living your life as you.

> Surely you can infer when you work and sleep from your experience living your life as you.

Not everybody has a schedule. Mine is essentially "eat when hungry, sleep when tired", and my sleep patterns more closely follow a 26-hour day than a 24-hour day.

Re: A web page that shows you everything the browser told it without asking

#192

Post by llbbdd »

dylan604 wrote: post #20
freedomben wrote: post #7

Earlier quoted context omitted.

Heh, my battery (which I don't have cause this is a desktop) is at 100% apparently

Battery: kept back Your browser kept your battery level back. Firefox removed this API entirely in 2016, after researchers proved it could be used to track a visitor across websites without cookies, without consent. The API still exists in the specification. It was simply hidden — from you, and from any page that might ask after it. Well, at least something positive from the shit I take for not sheepling my way throu…

I got this message and I'm on Chrome, on a laptop. I tested in the console on that site and was able to get the battery level though, so I'm pretty sure their check is just broken.

Re: A web page that shows you everything the browser told it without asking

#196

Post by pixel_popping »

Cider9986 wrote: post #182
pixel_popping wrote: post #127

Earlier quoted context omitted.

But anybody knows (in tech I mean) that a browser client leak a lot of things and sustained tracking is easy even cross-browsers (and cross-devices too with more advanced techniques), including history (easy to know which websites were visited with timing analysis in loops and iteration), it falls on the responsibility of the user to achieve privacy, but it requires heavy sacrifices that frankly most users are not wi…

I would never use NordVPN–I think their marketing is deceptive and they don't accept private payments, among other issues, but there is a big difference between the VPN collecting data and just their website. Bitwarden has a privacy respecting pw manager, but their website uses analytics.

Absolutely, Nord is a sh*t company when it comes to privacy, they removed the anonymity claim as well recently and changed it by "Security", but anyway a VPN is far (very far) from being enough to reach decent level of Opsec. Anyway, VPNs that care can start use Enclave at the very minimum, but it's insufficient as traffic can easily be correlated if you disconnect peers one by one (gov can just sniff DC firewall, then DDoS each IP connecting through it, check if the guy is still online... (ton of ways)). Mullvad is clearly more trustable regarding the steps taken to ensure more privacy, but it's not enough on its own and even them say so.

For Bitwarden, well, US government (and Google, and more) is aware of your usage of it through their analytics so I wouldn't say it's really privacy respecting but sure, there is a bigger effort yeah.

Re: A web page that shows you everything the browser told it without asking

#198

Post by brudgers »

cortesoft wrote: post #149

Maybe it's just because I am old, or have worked on internet software for almost 30 years, but none of this seems surprising or even concerning? Someone sets up a server that accepts connections to it and then someone sends a connection request to it. There has been no agreement on anything, no expectations or rules established. No one forces the server to accept any connection request it gets, and no one forces some…

Someone sets up a server that accepts connections to it and then someone sends a connection request to it.

My disappointment is not with websites. It is with browsers. They have continuously prioritized dark pattern support. They have consistently removed user control.

I mean it's not the websites that default to recording every keystroke, default to tracker persistence, default to phoning home with daily telemetry, etc.

When I first started using HN, I ran four very different browser engines. Now there's no real choice.

Re: A web page that shows you everything the browser told it without asking

#199

Post by ryandrake »

cortesoft wrote: post #149

Maybe it's just because I am old, or have worked on internet software for almost 30 years, but none of this seems surprising or even concerning? Someone sets up a server that accepts connections to it and then someone sends a connection request to it. There has been no agreement on anything, no expectations or rules established. No one forces the server to accept any connection request it gets, and no one forces some…

> Of course, I know in practice most people don't understand what their browsers are doing, and there aren't a ton of practical choices for people around what their browser sends, and the internet is no longer an optional thing for a lot of our lives.

This is the root problem. Your browser is supposed to be your agent. It's the User Agent, after all! It should be working on the user's behalf, users should understand what their browsers are doing, and browsers shouldn't be doing anything without the user understanding and affirmatively consenting to it. I should be the ultimate authority over what my browser sends, and browsers should make it trivial to exercise that authority.

In reality, the browser is Somebody Else's Agent. It's working for the web developer, giving him all sorts of things that make his life easier. And it's working for the advertiser, providing tracking clues and fingerprinting. And it's working for the browser developer, collecting metrics and telemetry and god knows what else for them to do god knows what with. But, it's not really working for me or on my behalf anymore, I'm just a passenger in the car.

EDIT: Understood that IP address is not something under the browser's control, and it's unfortunately necessary to reveal in order to connect to a web site. It's a terrible mis-feature that IP addresses (by default without a VPN) can be reliably mapped to countries, state/provinces, and sometimes even cities. This is a huge design flaw in how we hand out IPs. In a better world, having an IP address shouldn't reveal anything about someone's geographic location.

Re: A web page that shows you everything the browser told it without asking

#200

Post by relevant_stats »

The stats are wrong - on Android my finger has not moved triple digit times, and I haven't tapped double digit times. In 4 seconds.

My general location is also wrong.

This site's theme is barely visible.

And the entire idea for the site is at least couple decades old.

Unoriginal slop.

Post reply on HN