11–20 of 21 posts
http://antirez.com/page/cachetest.html
AFAIK the bug I shown is not currently fixed. The idea is to perform a request for an image in the target site (usually the logo), meter how many milliseconds it takes, if it takes very little (near to zero) you already visited the site. If the latency is instead in the normal range you didn't. See the article for more info.
Yet another reason to use NoScript. ... why would I be down-voted for mentioning a solution which prevents 100% of JavaScript history attacks???
It's not really relevant to anything. I could say it's another reason to go back to using BBS's instead of the WWW, but that's not really a useful observation is it.
Yet another reason to use NoScript. ... why would I be down-voted for mentioning a solution which prevents 100% of JavaScript history attacks???
It's not really relevant to anything. I could say it's another reason to go back to using BBS's instead of the WWW, but that's not really a useful observation is it.
Sure, goodsite.com can choose to spy on you... but that is less likely than some other random site being the bad one.
Yet another reason to use NoScript. ... why would I be down-voted for mentioning a solution which prevents 100% of JavaScript history attacks???
Earlier quoted context omitted.
It's not really relevant to anything. I could say it's another reason to go back to using BBS's instead of the WWW, but that's not really a useful observation is it.
I don't think disabling JS by default is equivalent to going back to BBSes. IMO it's how JS and other client-side scripting technologies should have been implemented from the very beginning, on an opt-in basis with the onus on the site developer to convince users that it's worthwhile to enable the feature for their site.
At one time browsers didn't display images by default eiter. It was horrible.
This is the best use of it: http://startpanic.com/ Demonstrates how powerful the technique is.
This is really old news. Here's an HN link discussing someone's batshit crazy startup idea based on it: http://news.ycombinator.com/item?id=404564
This is really old news. Here's an HN link discussing someone's batshit crazy startup idea based on it: http://news.ycombinator.com/item?id=404564
It's definitely a useful trick for only showing certain content to certain users. For example, I wrote a script so you only show Digg buttons to visitors that have been to digg.com: http://int2e.com/blog/improved-digg-integration-script/
...digg button code...
a.digg:visited { display: none; }