4 ms·
This particular cases is just an unintended consequence. They could put a limit on the connection duration, but you could also just slowly drip the bytes of a r
by wybiral 8y ago
This particular cases is just an unintended consequence. They could put a limit on the connection duration, but you could also just slowly drip the bytes of a real favicon image (possibly augmented with junk metadata) and how would the browser know that it's not just a slow server connection?
- techntoke 8y agoThese are favicons we are talking about. There is no legitimate reason for the browser to enable and permit this type of tracking without some permission from the user.
- wybiral 8y agoIt's not really "permitting" it, that's just how the internet works. If you send the data slowly you can keep a connection open. And fighting privacy violation is basically a game of cat and mouse. As soon as we figure out how to block their tactics, they evolve. If what I'm doing here became mainstream they would probably do something about it, but as it stands this is much easier to do using JS or something anyway (which people know violates their privacy but they leave it enabled because modern websites break down without it).
- zzo38computer 8y agoAnyways I disabled favicons on my computer from when I installed it, because that is not a feature I use. I did not know of this specific use before, but now I do.
- wowMarijuana 8y agoToke some more, @techntoke. Toke some more.