121–130 of 181 posts
Earlier quoted context omitted.
Just what I was thinking. Can't you render the DOM to a canvas and then access the pixels in that?
Apparently not: https://developer.mozilla.org/en-US/docs/Web/HTML/Canvas/Dra... > Visited-link styles aren't applied to links rendered in SVG images, so history information can't be retrieved, and native themes aren't rendered in SVG images, which makes it harder to determine the user's platform.
Here's the same exploit disguised as a game, to make it less obvious that it's tricking the user into interacting with it: http://lcamtuf.coredump.cx/yahh/ Documentation of the game proof-of-concept: http://lcamtuf.blogspot.com/2013/05/some-harmless-old-fashio...
Thx. for the links.
Earlier quoted context omitted.
They could do the same game, but hard-code the results, and be right for 95% of the audience here :)
Hmm, I was: 1. technology 2. programming 3. history 4. politics 5. design 6. architecture And it was dead-right.
In Firefox, you can go to about:config and set layout.css_visited_links_enabled to 'false'. This page, and others that hack the visited links styles, will no longer work.
And also note that this will remove all :visited styling, included the usual blue->purple. Just a heads up for people changing this variable because they think their privacy is being invaded.
https://hacks.mozilla.org/2010/03/privacy-related-changes-co...
I remember few years ago this concept was demonstrated as an way to get user website history from the browser. This is big privacy hole. And sadly nothing changed. Which is sad.