4 ms·
"You visited about n sites before coming here" How the hell does that work ?
by navaati 6y ago
"You visited about n sites before coming here" How the hell does that work ?
- tomg 6y agowindow.history.length would be my guess.
- acwan93 6y agoI can't find the website, but there's a site that specifically tells you everything it knows about you just by keeping the page open. It tells you if it knows where your cursor is, what pages you've been to, what your computer is, etc. It was intended to show that you, the user, give out a lot of data without even realizing it. EDIT: I did a search on reddit and it looks like it actually is https://clickclickclick.click https://clickclickclick.click, but because the site hasn't been accessible I can't be sure.
- iAmAPencilYo 6y agoWould be interested in it if anyone finds it!
- xtracto 6y agoThere was a very nice attack regarding you being logged in to different websites by attempting to fetch crafted URLs that would be available only if you were logged in. Quite clever.
- alexpetralia 6y agoThis is called super logout.
- mahathu 6y agobut what would the issue be if some random site knew I was logged into google/amazon/facebook at the time?
- minitech 6y ago- consider that the same thing applies to sites that aren’t google/amazon/facebook that you might care about - it helps with fingerprinting - there’s no reason to allow it
- mahathu 6y agoGood points, especially the first one. Thanks.
- xtracto 6y agoGreat question. When I read about that i was working for an online lending startup. We briefly discussed on using such a feature as a signal for credit risk underwriting. The logic was that, maybe you were logged to Telcel or to Movistar, or to Liverpool vs Sears (Mexican retailers). That could give us signal on the probability of default
- SAI_Peregrinus 6y agoYou opened a new domain and didn't have it in an isolated container. So it could query the history length, even if it can't query the actual history.