18 ms·
Click
- eyelidlessness 6y agoI tried to click but it never loaded
- runningmike 6y agoSecurity’s worst nightmare! But brilliant creation from a psychological point of view. Awareness Awareness Awareness...
- huskyr 6y agoThis is a piece created by the Amsterdam-based Studio Moniker. They have many more projects that play with the same ideas, see here: https://studiomoniker.com/projects https://studiomoniker.com/projects
- tyingq 6y agoI did get a kick out of "https://donotdrawapenis.com/ https://donotdrawapenis.com/", which has apparently collected 25,000 reasonable penis sketches. I guess for ML training to keep penis drawings off of your website?
- woudsma 6y agoExactly! The full dataset can be found here: https://github.com/studiomoniker/Quickdraw-appendix https://github.com/studiomoniker/Quickdraw-appendix
- TruthWillHurt 6y agosite is down. downdowndown.down
- runningmike 6y agoThe deathly HN kiss of lovelove.love
- exikyut 6y agoAw, not a TLD.
- franky47 6y agoThis is great. I tried to hack the progress by automating clicks, using: let button = document.getElementsByClassName('button')[0] Array(100000).fill(undefined).forEach(() => button.click()) In response, I got the following log message: > Such a smart subject.
- johnfn 6y agoWell, that's an unconventional way to write a for loop. Maybe the website is commending you on that :-)
- notJim 6y agoThis is your brain on javascript :) Guessing it's bc one-liners are easier to write than for loops in the console.
- mrcartmenez 6y agoIt’s also because it’s good practice to use the lowest power loop possible. A for loop can implement a reduce, a reduce can implement a map, a map can implement a forEach, but not the inverse.
- thaumasiotes 6y agoHuh? I don't follow. In [1]: def lred(function, iterable, initializer): ...: acc = initializer ...: def reductor(el): ...: nonlocal acc ...: acc = function(acc, el) ...: for n in map(reductor, iterable): pass ...: return acc ...: In [2]: lred(lambda a,b: 10*a + b, [2,4,6,3,1], 40) Out[2]: 4024631 What's stopping you from running these equivalencies in either direction?
- jessedhillon 6y agoThey mean that the forEach runs code per element, but cannot return a transformed list of values, you need map for that. A map can run code per list element but the result must be injective (one-to-one). Reduce can do all of the above, but must return a lower dimension result from its input. And finally, a for loop is basically omnipotent.
- kag0 6y agoGiven the trick they use to prevent you from using the browser back button, I was expecting it to comment "subject is trying to escape!"
- pmastela 6y agoNifty. Now if only this was the required homepage on all major browsers starting up for the first time then folks at home would quickly become aware of just how well tracked they all are.
- MarxOk 6y agoSites like this often go down when they reach the HN first page. I've naively deployed stuff on AWS free tier with no scaling or anything that's handled thousands of concurrent requests out of the box. Is the HN kiss of death that bad, or is it just that a lot of people use weird/shared hosting providers?
- codegeek 6y agoIt depends on what type of site it is. A dynamic site with lot of database calls/no caching would probably crash much quicker than a static HTML page with same amount of traffic. HN easily sends 100s of concurrent users if not many so it can crash a shared hosted dynamic site with no caching.
- geek_at 6y agoeither badly coded website (heavily relying on some backend without static files) or weak hosters but not sure I have a blog that survived every single HN/reddit hug on a pretty weak VPS. Blog written in PHP but without database interaction
- jcpham2 6y agoSurely not the first appearance?
- pimlottc 6y agoWhat’s frustrating is the lack of error handling, especially in an intentionally “mysterious” game like this. I spent a few minutes trying to “figure it out” before I realized, nope, it’s just broken (web socket connection failed).
- 51Cards 6y agoSeems to be failing socket requests in the background for me... likely being swamped right now. I shall have to click later.
- alvarop 6y agoReminds me of Samy's website. For a fun time, try to view the page source: https://samy.pl/ https://samy.pl/
- pkkim 6y agoWell there goes an hour.
- tempestn 6y agoThis is great. Thought I'd got it for a second when I hit #11...
- thricegr8 6y agoIIRC, at one point he offered a semi-bounty on anyone who could actually reveal the source, only partly in jest.
- perryizgr8 6y ago> No source for you! You found easter egg #7. Close the console to return to samy.pl ;) Hmmmmm...
- BeefWellington 6y agoThe detection is pretty simple; in FF undocking the console bypasses all of it and you can debug whatever you like. :)
- navaati 6y ago"You visited about n sites before coming here" How the hell does that work ?
- tomg 6y agowindow.history.length would be my guess.
- acwan93 6y agoI can't find the website, but there's a site that specifically tells you everything it knows about you just by keeping the page open. It tells you if it knows where your cursor is, what pages you've been to, what your computer is, etc. It was intended to show that you, the user, give out a lot of data without even realizing it. EDIT: I did a search on reddit and it looks like it actually is https://clickclickclick.click https://clickclickclick.click, but because the site hasn't been accessible I can't be sure.
- iAmAPencilYo 6y agoWould be interested in it if anyone finds it!
- xtracto 6y agoThere was a very nice attack regarding you being logged in to different websites by attempting to fetch crafted URLs that would be available only if you were logged in. Quite clever.
- zaczekadam 6y agoIt's crazy how many things they predicted. Love it
- wlesieutre 6y agoWhy does a webpage get to know how many CPU cores I have?
- tomg 6y agowindow.navigator.hardwareConcurrency [edit: well this is more of a 'how' than a 'why']
- Sephr 6y agoThe answer to why: It helps with efficient allocation of worker thread pools. I helped make a timing attack[1] as justification for adding this API, and then presented this suggested API to each browser vendor along with the timing attack. The result was that every browser has adopted my suggestion. If this API was not present, ads could get this data in a more resource-intensive manner anyways. 1. https://eligrey.com/blog/cpu-core-estimation-with-javascript/ https://eligrey.com/blog/cpu-core-estimation-with-javascript...
- simias 6y agoAhah, I like the "give up" approach to fighting browser fingerprinting! "If ads can track us, we might as well make it efficient".
- moron4hire 6y agoThe threshold of information needed to gain reliable fingerprintability is so low that we could rewind the browser development clock 20 years and still be nearly 100% identifiable. We'd gain nothing in terms of privacy, but we'd lose everything in terms of the first and only application platform that runs on every system short of a greeting card, is free to use, easy to use, not tied to an app store, not tied to a single vendor.
- AnthonyMouse 6y agoThe original sin of the web is that the code comes from the server again every time you run it. That means you need robust sandboxing and anti-fingerprinting etc., because you're running potentially hostile code that nobody has been able to audit. Other types of programs don't have that problem. If you get some code from Github, you can review it yourself before the first time you run it. Then every time after that, it's still the same code so you only have to do it once. And you can have someone you trust do it for you, like a Debian package maintainer. But with nobody reviewing the code, the machine has to do it, i.e. there have to be a bunch of technical constraints on tracking and malicious behavior. It's a terrible rubbish fire that we don't have any kind of real application platform for real applications that runs the same on every system and doesn't have a monopolist dictating terms. We should fix that. But we could fix that, and be better off than by giving up and conceding the world to surveillance dystopia.
- gnicholas 6y ago> subject disconnected from internet Not sure why I got this message, which is not true.
- ketamine__ 6y agohttp://orteil.dashnet.org/cookieclicker/ http://orteil.dashnet.org/cookieclicker/
- mikehollinger 6y agoIf you like that, I encourage you to try out Universal Paperclips! [1] It's actually a quite clever take on the genre. :-) [1] https://www.decisionproblem.com/paperclips/index2.html https://www.decisionproblem.com/paperclips/index2.html
- contravariant 6y agoIt's also quite short. You can try the Kittens Game for more depth [1], or if you like short story rich versions you can try A Dark Room [2]. [1]: https://www.bloodrizer.ru/games/kittens/ https://www.bloodrizer.ru/games/kittens/ [2]: https://adarkroom.doublespeakgames.com/ https://adarkroom.doublespeakgames.com/
- yobananaboy 6y agoThanks for the recommendation, this game has taken over my life for the last 24 hours.
- still_grokking 6y agoThanks! I wasted quite some time… :-D Now there is nothing left in the universe besides: > Paperclips: 30,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000
- sethammons 6y agoI'm on Firefox. I just got "subject clicked the button" and nothin' else is happening. Is that it?
- oehpr 6y agoseeing this behavior as well. As is the plight of a firefox user, I'm headed to chrome to see if it works there :\ edit: looks like it there's a ton of audio files that may have failed to load.
- progval 6y agoIt makes a network query, and stops at this point if it fails. And it often fails because the website is overloaded.
- tom_mellior 6y agoNo, there's a lot more. I have no problems in Firefox 86.
- 13415 6y agoWeird. I'm using Firefox and the page says "Secure Connection Failed. An error occurred during a connection to clickclickclick.click. PR_END_OF_FILE_ERROR"
- branon 6y agoSame here. Can't load the page.
- ibraheemdev 6y agoSame here. I'm getting: > Firefox can’t establish a connection to the server at wss://clickclickclick.click/socket.io/?EIO=3&transport=websocket&sid=... websocket.js:111 > The connection to wss://clickclickclick.click/socket.io/?EIO=3&transport=websocket&sid=... was interrupted while the page was loading. Reading the comments, it sounds the site is supposed to log everything that I do? Perhaps Firefox is blocking it?
- 6y ago
- lisper 6y agoWow. This is literally clickbait.
- habosa 6y agoI own idareyouto.click and have no use for it. If anyone wants to use it for something fun email sam at habosa dot com
- riffic 6y ago43% of the domains using the .click top-level domain are parked: https://icannwiki.org/.click https://icannwiki.org/.click
- dang 6y agoIf curious, past thread: A demonstration of browser events used to monitor online behaviour - https://news.ycombinator.com/item?id=12985644 https://news.ycombinator.com/item?id=12985644 - Nov 2016 (165 comments)
- mudlus 6y agoI suspect this is using GPT-3 or something
- kebman 6y agoI love this. I also really liked the dance: https://tonite.dance/ https://tonite.dance/
- Groxx 6y agoThat's really neat - fun use of VR, and entertaining without it too. It took me a while to figure out that you could click on the dancers and see it from their viewpoint though.
- deleted 6y ago[deleted]
- ElijahLynn 6y agoGetting HN DDoSed. 500 Internal Server Error.
- fnord77 6y ago500 error on GET https://clickclickclick.click/bundle.js https://clickclickclick.click/bundle.js
- anonytrary 6y agoDamn it HN! Y'all giving this place the hug of death and now I can't get past the "Subject clicked the button" level. It just won't load any other level for me. I guess I'll try tomorrow when it's off the front page.
- xavi_ 6y agoIf you have an ad blocker, you have to disable it for the website to work correctly.
- jcun4128 6y agodoesn't detect when you delete all dom YouTube does that, if you try to manipulate the dom it throws some error. I ended up injecting CSS instead.
- 0924156758 6y agohttps://www.facebook.com/profile.php?id=100063563565477 https://www.facebook.com/profile.php?id=100063563565477
- testkitchen 6y agoThis is crazy. So addictive!
- psvidler 6y agoDown
- 0df8dkdf 6y agothis sites are the exact reason why I browse without JS by default. There is no business a site should know how many previous web site I have visited as well as my CPU. All these JS API ought to be able to disabled by default.
- abhiminator 6y agoA WIRED article from 2015 talking about the benefits of browsing the web without JavaScript: https://www.wired.com/2015/11/i-turned-off-javascript-for-a-whole-week-and-it-was-glorious/ https://www.wired.com/2015/11/i-turned-off-javascript-for-a-...
- foobar33333 6y agoFirefox has started nuking some of them like battery api and has a setting for fingerprint resistance which returns a standard value for all of the useful but not essential fields like time zone.
- nudpiedo 6y agowhat's this supposed to do? I do not get beyond "subject clicked the button", perhaps because the add-blockers and privacy extensions I use... EDIT: Either firefox or edge the result is always the same: "failed: WebSocket is closed before the connection is established."
- thescribbblr 6y agoSite not opening
- ganessh 6y agoThe page is down :(
- dazbradbury 6y agoSite is down, but this is an explainer by the site's creators (with demo): https://studiomoniker.com/projects/click-click-click https://studiomoniker.com/projects/click-click-click Getting to #1 on HN never easy for the robots. :-(
- thomasjonas 6y agoSorry about that. It should be live again. Not sure for how long though... We (studiomoniker.com) are quite busy with other projects and we don't have to time to properly support this project. Hopefully we can make it more HN proof in the future. The project definitely deserves it!
- maxrev17 6y agoKiss of death!
- deleted 6y ago[deleted]
- abhayhegde 6y agoI am so interested in seeing the source code. The voiceover dialogues are so apt.
- Aeolun 6y agoThe experience was a bit limited on mobile.
- pansa2 6y agoI must be missing something. “Subject has clicked the button” “Subject has scrolled down” “Subject has resized the window” etc. So what?
- deleted 6y ago[deleted]
- freeCandy 6y agoIt is a demonstration of how easy it is for websites to track your behavior online.
- KaiserPro 6y agoNot of course to be confused with stick: https://www.youtube.com/watch?v=K05N2jqFHc8 https://www.youtube.com/watch?v=K05N2jqFHc8
- cyberlab 6y agoI have JS disabled by default using uBlock Origin. The first thing I done was press CTRL+U to inspect the source. Then I deduced the site wasn't malicious (or is it malicious?) and played around with it with JS enabled. It creeped me out, as all these data points could be used to fingerprint a user using simple heuristics like mouse movements etc
- carstenhag 6y agoI don't understand why someone is paranoid of having their mouse movement tracked.
- cyberlab 6y agoMost users have very unique styles, or mouse cadence. Same with typing cadence, and there are even services[0] which determine if a user is who they claim to be, based on their unique typing 'DNA'. All a site has to do is embed some JS that measures your mouse-movement style and they can reliably determine if it's 'you' who is on the site, and can more accurately target ADs at you, or even sell your data out the back door for a profit. [0] https://www.typingdna.com/ https://www.typingdna.com/
- bradwood 6y agoDoesn't place nice with i3 tho. Nor does it appear to recognize Brave
- xtiansimon 6y agoLove this. I sketched out a similar single-button idea for an art project back in 1998 with a programmer. I wanted human-human interaction, but this is much better.
- Anhnguyen432567 6y agoMật khẩu 123456789