5 ms·
It's very interesting seeing exploits like this from this organization. On one hand their service fingerprints users and offers extended metadata like whether t
by parhamn 5y ago
It's very interesting seeing exploits like this from this organization. On one hand their service fingerprints users and offers extended metadata like whether the user is in incognito via sketchy web apis.
On the other hand they report (and help close) some gnarly exploits like this via sketchy web apis.
What do you all make of this? It's hard to not see it as some weird "were not doing a bad thing" gaslighting (perhaps even internally to their team).
- toomuchtodo 5y agoManaging the Overton window and anchoring wrt browser tracking.
- codeptualize 5y agoI had the same thoughts; it seems to present a friendly picture but there are a lot of unanswered problems with this technology, even if only used for fraud protection. What if clients use it for tracking and other shady purposes, would they do something about it? Btw I tried with Tor Browser and it did not accurately fingerprint it between sessions which makes me wonder how effective it really is. Especially for fraudsters; intentional bad actors, I think it would be quite easy to bypass.
- tinus_hn 5y agoThis vulnerability exists whether they report it or not.
- deleted 5y ago[deleted]
- matkoniecz 5y agoMaybe they help to close exploits used by competition? Or ones they are not planning to use anyway, but are possible to be used by competition? Or for marketing purposes to be not known as 100% clearly evil? Or for marketing purposes to be better known?
- easrng 5y agoIndexedDB isn't sketchy, just annoying. It is the only semi-reliable way to store more than a few MBs of data with JS, but the API is awful and it's a pain to use without some kind of wrapper to make it bearable. (LocalForage is good, it provides a LocalStorage-like API on top of IndexedDB or some other APIs in older browsers.)