Live data from Hacker News

Tor NoScript visit tracker

bitbucket.org

1–10 of 24 posts

Re: Tor NoScript visit tracker

#2
> NoScript Tracker is a basic tracker that makes use of iframes and the Refresh HTTP header to measure how long users spend on web pages.

> It is ideal for getting basic usage statistics on the Tor network, where JavaScript is not an option for most users.

NoScript can block iframes; will that disable this tracker?

Also, does the Tor Browser, which includes NoScript, default to blocking iframes?

Re: Tor NoScript visit tracker

#3
post #2

> NoScript Tracker is a basic tracker that makes use of iframes and the Refresh HTTP header to measure how long users spend on web pages. > It is ideal for getting basic usage statistics on the Tor network, where JavaScript is not an option for most users. NoScript can block iframes; will that disable this tracker? Also, does the Tor Browser, which includes NoScript, default to blocking iframes?

> Also, does the Tor Browser, which includes NoScript, default to blocking iframes?

No. Tor Browser defaults to the lowest security level, allowing all scripts, media, iframes, etc.

Re: Tor NoScript visit tracker

#7

What else, besides using Tor, and turning off Javascript, does a user have to do that a website operator finally gets they don't want to be tracked?

But this can't track individual users, it just provides general usage statistics, like visitor retention.

I'd be interested in a viable example of this being used to identify users.

Re: Tor NoScript visit tracker

#9
post #7

What else, besides using Tor, and turning off Javascript, does a user have to do that a website operator finally gets they don't want to be tracked?

But this can't track individual users, it just provides general usage statistics, like visitor retention. I'd be interested in a viable example of this being used to identify users.

That can help with fingerprinting. Any entropy escaping from a users session is useful.

Re: Tor NoScript visit tracker

#10
post #7

What else, besides using Tor, and turning off Javascript, does a user have to do that a website operator finally gets they don't want to be tracked?

But this can't track individual users, it just provides general usage statistics, like visitor retention. I'd be interested in a viable example of this being used to identify users.

I may be missing something, but it seems to me that this technique(if not this particular implementation) could be used to easily track individual users.
Post reply on HN