Live data from Hacker News

Show HN: Your Social Media Fingerprint (maybe NSFW)

robinlinus.github.io

131–140 of 258 posts

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#134

This is why I use 'browser isolation', which is a way to separate different types of surfing activity into different buckets. Currently the best way to do this in Firefox is to create multiple profiles, or in Chrome, you can simply add a different user/persona. Having one profile, or even an entire dedicated browser just for Twitter/FB ensures the login is not spilled over into other sites. If you're surfing the web…

At risk of being depressing, it's worth knowing that a dedicated profiler can reconcile accounts across all of the protections you've mentioned - not just as a targeted attack, but algorithmically. There are a lot of fingerprinting tricks which transcend cookie restrictions and user profiles. The battery percent/value one will reconcile all accounts on one device (as will several other like fonts). If you log into on…

Indeed.

Another trick is to change or settle for one very common user-agent across all browsers, and to run them with differently sized windows.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#135
post #103

TIL YouPorn is considered social media

ironic that youporn is included in this list considering they lost in a class action suit for very similar business practices. https://www.scribd.com/doc/44635414/Pitner-Versus-Youporn

+1 very interesting case - company never located on US soil is being sued in California for something of a peanut size comparing to what Facebook does.

I know a bit off topic but I can't find how this case ended. Anyone with better Google skills??

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#136
post #123

FYI, it's very NSFW in the back-end. Your browser is sending requests to obvious porn servers when you hit this link so it can test if you're logged in to them.

Yeah, that would've been nice to know ahead of time. Why not, for example, trigger the test when someone clicks a button, rather than taking someone's page visit as permission to try lighting up their organization's content filter?

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#137

In Chrome: Settings > Privacy > Content Settings > Tick 'Block third-party cookies and site data' Also set 'Send a "Do Not Track" request with your browsing traffic' And install uBlock Origin, ofc.

As somebody who tried to build code respecting "Do Not Track" preferences, I have to say that feature, while well-intended, is a complete farce. Chrome, Safari, Firefox, IE9, IE10, and IE11 all use different APIs for Do Not Track [1], so a front-end developer has to do a lot of extra leg work to check if the user has the preference set. I find it highly unlikely that most companies would go through the effort of resp…

Wow. I am surprised at how many different ways Firefox, Safari, and IE9/10/11 implement an API as simple as navigator.doNotTrack.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#138
post #123

FYI, it's very NSFW in the back-end. Your browser is sending requests to obvious porn servers when you hit this link so it can test if you're logged in to them.

Yeah, that would've been nice to know ahead of time. Why not, for example, trigger the test when someone clicks a button, rather than taking someone's page visit as permission to try lighting up their organization's content filter?

I think it helps in conveying the fact that it is a vulnerability not a feature.

So any website (even your own company's internal one) can check stuff like this. And you can't do anything about it. Other than always using private browsing for anything you don't want your company/anyone else to know about.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#139
post #50

Earlier quoted context omitted.

But isn't it better to at least ask instead of not asking at all?

Its pretty obvious the default should be the opposite to avoid a race condition like that.

It was proposed that DNT be the default, but then ad companies said if that were the case, then they would just ignore the header. They want users to explicitly opt out of tracking otherwise they will assume they agree to being tracked.

Re: Show HN: Your Social Media Fingerprint (maybe NSFW)

#140
post #138

Earlier quoted context omitted.

Yeah, that would've been nice to know ahead of time. Why not, for example, trigger the test when someone clicks a button, rather than taking someone's page visit as permission to try lighting up their organization's content filter?

I think it helps in conveying the fact that it is a vulnerability not a feature. So any website (even your own company's internal one) can check stuff like this. And you can't do anything about it. Other than always using private browsing for anything you don't want your company/anyone else to know about.

I mean, if somebody is logged into YouPorn from work, that's not a problem I expect the developer of a tool like this to solve. What I expect the developer of a tool like this to do is not create problems by just arbitrarily making HTTP requests to porn sites without a prompt or a chance to opt out. That's a dick move.
Post reply on HN