Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

'Music' from /dev/urandom

blog.robertelder.org

Post reply on HN
Print view View original

31–40 of 58 posts

Re: 'Music' from /dev/urandom

#31

Post by witty_username »

ikeboy wrote: post #27
hnmcs wrote: post #25

Earlier quoted context omitted.

It was an excellent share you although I don't quite think "turning off CSS" would be my preferred defense. You can paste to an intermediate area to be sure you didn't catch something hidden from whichever site you don't trust (which allows users to inline arbitrary HTML elements with arbitrary styles). This is a habit one already might be in if they want to avoid being tracked from clicking on, say, Google search re…

If you try to copy a search result, it turns into a Google url that redirects to the result. On iOS this doesn't happen for some reason.

The onclick attribute of the search result does it, that may have something to do with that.

Re: 'Music' from /dev/urandom

#32

Post by ikeboy »

witty_username wrote: post #31
ikeboy wrote: post #27

Earlier quoted context omitted.

If you try to copy a search result, it turns into a Google url that redirects to the result. On iOS this doesn't happen for some reason.

The onclick attribute of the search result does it, that may have something to do with that.

It does happen on Android. So apparently they treat onclick differently.

Re: 'Music' from /dev/urandom

#33

Post by jerf »

michaelmior wrote: post #21

Handy smoke test for a good RNG? Not sure I see any case where it would actually be useful for this in practice, but I find the idea amusing in theory.

You may be able to hear or see that a very bad RNG is bad (there are certainly sufficiently bad ones for which you can), but you can not hear or see that one is good.

Re: 'Music' from /dev/urandom

#34

Post by hnmcs »

ikeboy wrote: post #27
hnmcs wrote: post #25

Earlier quoted context omitted.

It was an excellent share you although I don't quite think "turning off CSS" would be my preferred defense. You can paste to an intermediate area to be sure you didn't catch something hidden from whichever site you don't trust (which allows users to inline arbitrary HTML elements with arbitrary styles). This is a habit one already might be in if they want to avoid being tracked from clicking on, say, Google search re…

If you try to copy a search result, it turns into a Google url that redirects to the result. On iOS this doesn't happen for some reason.

I knew it would take a few bare minutes before someone would come to make that distinction about how Google search links work.

Then I would have to say "okay copy the domain and path from your search result, which isn't a link, and which Google probably hides already (so this new advice won't work any more) or they will hide it some day, so the system doesn't work as literally as I described it."

So if Google has found more and more ways to avoid people avoiding their tracking, that's fine, and what I said literally doesn't apply if you take it 100% literally, but at least you understand what I'm saying about how to avoid the naive copy paste surprise.

Re: 'Music' from /dev/urandom

#37

Post by Raphmedia »

chei0aiV wrote: post #11

I hope everyone is turning off CSS before copy-pasting this command-line into their terminal :) http://thejh.net/misc/website-terminal-copy-paste

Always paste to the browser url bar and then copy again. This clears any extra tags you might carry over and will display anything that might be hidden. You could copy and paste to notepad, but the browser bar is closer.
Post reply on HN