3 ms·
I think it's too late to put history scraping back into Pandora's box. There are several articles on it already out there. Those who are less scrupulous alrea
by whyenot 17y ago
I think it's too late to put history scraping back into Pandora's box. There are several articles on it already out there. Those who are less scrupulous already have all the information they need.
At this point, I think the best that can be done is to make people aware of the practice. No browser should leak history by default. It's a huge security vulnerability, and should be regarded as such. Start putting pressure on Mozilla, Google, MS et al to fix it.
- fnid2 17y agoTo be clear, I am only advocating the self-censorship of this information until the browsers you mention have had a chance to fix it and people up grade. I guess really you just gotta delete your history all the time. Or make history links only work for the domain. If you see a link in a page that is not on the domain where the page originates, then make it the same color as the unvisited links.
- Groxx 17y agoI just hunted around for a bit, and found a few possibilities. Now all we need is User Javascript that can run before the site loads, in all browsers, and we're golden :) User Javascript strikes me as more likely to be implemented than anything specific to this problem. http://news.ycombinator.com/item?id=1139172 http://news.ycombinator.com/item?id=1139172