4 ms·
Yes and yes - Right click raises an event, and copy specifically raises an event. If in doubt: If it happens over or in a browser window, it is probably tracka
by arghwhat 10y ago
Yes and yes - Right click raises an event, and copy specifically raises an event.
If in doubt: If it happens over or in a browser window, it is probably trackable from JavaScript.
See: https://developer.mozilla.org/en-US/docs/Web/Events/copy https://developer.mozilla.org/en-US/docs/Web/Events/copy
- tornadoboy55 10y agoOver a browser Window? So If my 1Password window overlaps with my browser window, the page I'm on could sniff the entire 1Password window? Seems like a bunch of FUD..
- __david__ 10y agoIt's not really polite to call it FUD right off the bat, especially when you're probably just misunderstanding. A browser obviously can't get events from a different app.
- nommm-nommm 10y agoSubject to the same origin policy. https://en.wikipedia.org/wiki/Same-origin_policy https://en.wikipedia.org/wiki/Same-origin_policy
- arghwhat 10y agoThat protects you (to some extend) from page A accessing resources from page B. Same origin policy doesn't do anything to stop you from being tracked, though.
- nommm-nommm 10y agoYeah, of course, I was replying to a post about the concern about a website getting your entire 1password database.
- chriswarbo 10y agoYou built a strawman, but it can actually be dangerous to interact with an application on the same screen as a browser! https://jameshfisher.github.io/cursory-hack/ https://jameshfisher.github.io/cursory-hack/
- arghwhat 10y agoMoving your mouse over the window, despite not interacting with it, will allow the page to track your cursor, and could provide a surprising amount of information. That's why I wrote "over".