3 ms·
Wait for the new CSS version over which our team had a watch. Wont require JS after it comes out. ;D Also we know many exploits to bypass noscript if we wanted
by kakkksaknmdm 7y ago
Wait for the new CSS version over which our team had a watch. Wont require JS after it comes out. ;D
Also we know many exploits to bypass noscript if we wanted to (yes I know there are bounties for this, but we were paid much higher then any public bounty for this stuff)
- SahAssar 7y agoAs far as I understand the only way that it can work without without js is either by using @supports or similar feature/media queries (which would be the same for all users on the same hardware and browser) or by requiring user interaction (like a :hover state or clicking a link).
- kakkksaknmdm 7y ago>Latest methods dont even use JavaScript. Just CSS is enough to identify every device uniquely but you'd need JS to send the data back.
- SahAssar 7y agoYou said: > Wait for the new CSS version over which our team had a watch. Wont require JS after it comes out. ;D So how does that work considering what I said above?
- kakkksaknmdm 7y agoWhy would I want to give out that part completely? Upcoming spec change has two important thing required that will allow it to work without JS or user interaction with the page. Obviously I'm not going to give it away before the spec is implemented and once it gains enough usage on the web that going back is impossible.
- SahAssar 7y agoSo basically you have no proof, no discernible connections to anything you are talking about (no real user/comment history) and are posting pretty outrageous claims about tracking. Why would I believe you over all the public research available? If you really were working on this why would you be stupid enough to post about it here?
- tinus_hn 7y agoCSS provides basically no way to hide you’re doing this. I don’t believe this is real.