they did this with the birds in the wilderness downtown experiment like 5 years ago right? http://www.thewildernessdowntown.com/
Browserball
11–20 of 77 posts
Re: Browserball
#12This is one of those awesomely pointless conceptual experiments. Love it.
Re: Browserball
#13YouTube Demo: https://m.youtube.com/watch?v=XmH2QF92Jwo
why so serious?
Re: Browserball
#14Everything was made to be broken. Got this neat effect where the ball was spinning rapidly in the corner of each spawned window! http://imgur.com/gmwQOCb
Re: Browserball
#15they did this with the birds in the wilderness downtown experiment like 5 years ago right? http://www.thewildernessdowntown.com/
I just wanted to try that since it seems interesting. Sadly it tells me to enter the address of the home where I grew up, but then promptly refuses to recognize anything that I put in. It also says I can try schools, but does not recognize any of those either.
Maybe it only recognizes American addresses or something, but I don't know any of those.
edit: Ok I got it working by putting in Amsterdam, which happens to be a city and not an address.
Re: Browserball
#16I remember playing with this at least 8 years ago. It's really scary that there's enough information disclosure in browsers that it's possible to do this.
Re: Browserball
#17I can't remember the last time I was so happy to have 3 screens
Re: Browserball
#18What's the reason for allowing web pages to get absolute screen coordinates? This is a privacy leak. I have a 24" screen, and I don't keep the browser window maximized because it would be too big. I presume other people do to, and I'm pretty sure most have a preferred size and position.
>> What's the reason for allowing web pages to get absolute screen coordinates?
Web developers have always pushed for more access to information about the user and their environment. Browser and tool developers are happy to provide that access. There's always some use case that sounds reasonable, but you're right that it's just a security issue waiting to happen.
These holes are also being talked about in the new Wayland display server on Linux. Warping a mouse pointer, color picking, knowing your apps place on the desktop are all security violations. They are being very careful with that stuff because it's an insecure free for all with X.
Every time I upload an attachment to gmail or a picture to facebook, I wonder how secure things are. Those seem to require user action, but do they really?
Re: Browserball
#19What's the reason for allowing web pages to get absolute screen coordinates? This is a privacy leak. I have a 24" screen, and I don't keep the browser window maximized because it would be too big. I presume other people do to, and I'm pretty sure most have a preferred size and position.
Just use NoScript if you are concerned. JavaScript allows a large number of other ways to identify you as well. Direct ways of course include cookies / local storage / Web SQL, but other indirect ways include localization preferences, OS / browser / plugin / extension fingerprinting, HID inputs, side channel profiling etc. etc. – some combination of these allows uniquely identifying at least 80% of web users.[1][2][3]
Allowing a site to execute JS in your browser is equal to trusting them, like it or not, and browser vendors are definitely in the business of adding new APIs rather than reducing attack surfaces.
[1]: https://wiki.mozilla.org/Fingerprinting
[2]: https://github.com/Valve/fingerprintjs2
[3]: http://noc.to/
Re: Browserball
#20remembers one project that i did 4 years ago https://www.youtube.com/watch?v=NgA5EvOryU0