4 ms·
How does the site know what sites you are logged into? Is there some sort of guesswork involved?
by giza182 8y ago
How does the site know what sites you are logged into? Is there some sort of guesswork involved?
- ludston 8y agoThere is some javascript that is connecting to around 40 different websites. If you are logged into any of these sites already then they don't return a login prompt so the site knows that you are logged in.
- rapnie 8y agoYep, 21 trackers says Privacy Badger, and even more non-tracking.
- lkdjjdjjjdskjd 8y agoSo any site can grab the home page of any other site I am logged into, unless that site tries to prevent it (same origin policy or something like that?)? Yikes...
- air7 8y agoThat's not entirely accurate. Some trickery is involved... Javascript in one site can't just access another website's content. That's the Same Origin Policy. But what you can do is dynamically link to an image on another website. You can't access its content, but you can know if it loaded correctly. So if you find some image that is only accessible to a logged-in user (non logged-in gets a redirect for example) you can determine logged in status. Another technique uses time measurements and non-image resources. Loading them as an image will fail anyway, but if there is a substantial time difference in the error response for logged-in vs not, it can be done that way too.
- SmellyGeekBoy 8y agoWhere does it show this? Or is my browser so locked down that it can't even access this information?