3 ms·
Has anyone seen this kind of attack in the wild or are we stuck with increasingly far-fetched blog post examples of someone finding out I've been to google.com?
by hombre_fatal 3y ago
Has anyone seen this kind of attack in the wild or are we stuck with increasingly far-fetched blog post examples of someone finding out I've been to google.com?
- kobalsky 3y agolike more than 15 years ago there was a site that gave you a link you could share with someone and see what they had visited when they clicked. their database was huge and it went from a funny gotcha to awkward really fast
- olliej 3y agoYeah that and similar are why a bunch of css properties don’t report their actual computed style to JS
- josephcsible 3y agoThe Asahi Linux website uses it to harass Hacker News submitters: https://news.ycombinator.com/item?id=36231248 https://news.ycombinator.com/item?id=36231248
- throwawaymobule 3y agoThat's using the referrer header to detect if you clicked a link to their site from this domain. Totally different box of frogs altogether. JWZ uses the same trick, and redirects to an image of a hairy ball in an eggcup. Unless they're also doing some CSS stuff I haven't read about. Edit: clicked through a bit more. a red banner got added to their site using something like this.
- josephcsible 3y ago> That's using the referrer header to detect if you clicked a link to their site from this domain. Totally different box of frogs altogether. No, that's what they used to do until HN got updated to put rel="noreferrer" on the links specifically to stop that. > Unless they're also doing some CSS stuff I haven't read about. That's exactly what they're doing now. They have white-on-white text at the top of every page that turns red (i.e., becomes visible) if you've ever visited the HN submit page.
- throw10920 3y agoHoly moly, the hypocrisy is astounding. Why would anyone ever trust software written by a person so lacking in integrity?