71–80 of 128 posts
I said this when the vulnerability/bug/whatever you want to call it was posted here: I use the same method for fraud detection, and it works unreasonably well. That said, I'd rather there be permissions surrounding WebRTC, but my clients are happy.
I recently added tagsrvcs.com to my Privoxy blocklist. Source site? ycombinator.com.
So wasn't everyone up in arms about WHOIS recently but seemingly uses the service to identify who wrote this script?
I said this when the vulnerability/bug/whatever you want to call it was posted here: I use the same method for fraud detection, and it works unreasonably well. That said, I'd rather there be permissions surrounding WebRTC, but my clients are happy.
How do you use it for fraud detection? What does it tell you/what are you looking for?
Original discussion: https://news.ycombinator.com/item?id=8949953
I said this when the vulnerability/bug/whatever you want to call it was posted here: I use the same method for fraud detection, and it works unreasonably well. That said, I'd rather there be permissions surrounding WebRTC, but my clients are happy.
How do you use it for fraud detection? What does it tell you/what are you looking for?
Earlier quoted context omitted.
Wow, so if I'm reading that right, they wrote a tracker that generates a new request every 5 seconds? These scumbags are ruining the web. And they wonder why people use ad blockers...
It sounds like the requests were a bug: https://github.com/EFForg/privacybadgerchrome/issues/431#iss... This looks like it's trying to exercise every dark corner of the user's browser in order to ensure that the browser is a real, eyeball-facing browser and not just a URL fetcher, PhantomJS/SlimerJS, or a clickjacking plugin being used to fraudulently click ads. I think it's easy to see both sides here: tools like th…
So I did, Selenium allows you to automate a real browser and capture the responses, hell if need be you can create a fake profile with Chrome and make it completely indistinguishable.
EDIT: explanation, it was a video tutorial site for one of the technologies I use, each video had a download link but it had no way to batch downloads for offline use, scraping it with normal tools didn't work since it was doing UA and other sniffing so I whipped up a python script to control chrome to authenticate, sign in get the cookie and then pulled the unique to that session download link for each video, since I'm not a dirtbag I set the time between downloads to 30 minutes (average video is 15 minutes) and left it running for 24 hours to get the ones I wanted.
Earlier quoted context omitted.
And what should browsers prompt users with? "Would you like to use WebRTC?" What would that do to improve security for users?
I'm sure someone could do better than this but here is a first try at a suitably informative prompt: $site_name wants to use WebRTC. WebRTC allows voice calling, video chat, and P2P file sharing, but can also be a privacy risk. We recommend allowing WebRTC only on sites that you expect to use such features on. [Link to learn more] Allow WebRTC for $site_name? Something like Flash's audio/video access prompt would als…
Earlier quoted context omitted.
And what should browsers prompt users with? "Would you like to use WebRTC?" What would that do to improve security for users?
I'm sure someone could do better than this but here is a first try at a suitably informative prompt: $site_name wants to use WebRTC. WebRTC allows voice calling, video chat, and P2P file sharing, but can also be a privacy risk. We recommend allowing WebRTC only on sites that you expect to use such features on. [Link to learn more] Allow WebRTC for $site_name? Something like Flash's audio/video access prompt would als…
Earlier quoted context omitted.
I'm surprised that isn't enabled by default. I hope that the developer changes that in the future.
Presumably it breaks stuff.