4 ms·

I saw a variation of this idea once with a space game. IIRC you control a ship and asteroids attack you. You shoot the asteroids by clicking on them. The first

I saw a variation of this idea once with a space game. IIRC you control a ship and asteroids attack you. You shoot the asteroids by clicking on them. The first trick: the asteroids are actually (in)visible depending on whether you had visited a specific website, same as here. If you clicked on an asteroid that's because you could see it, and now you've revealed that you've visited that website before. Second trick: these asteroids don't actually hit you - they pass close by (close enough that you want to shoot them) but they don't actually aim at you (to keep you playing as long as possible).

jonny_eh 3y ago
> but they don't actually aim at you (to keep you playing as long as possible). Sounds like they can't have them hurt you since the game doesn't know which asteroids are "real" until you've destroyed them.
- LadyCailin 3y ago
  Just like this site, you can put some “honeypot” ones that ARE real, and those can be aimed directly at the player, but also don’t trigger any sort of detection.
omoikane 3y ago
Not an asteroid game, but similar idea: https://lcamtuf.coredump.cx/whack/ https://lcamtuf.coredump.cx/whack/ See also "History theft with CSS Boolean algebra": https://lcamtuf.coredump.cx/css_calc/ https://lcamtuf.coredump.cx/css_calc/
- bunga-bunga 3y ago
  Happy to see neither one works on Safari. One says "no sites visited" and the other "both sites visited" even in incognito.
  - DueDilligence 3y ago
    [dead]
trustingtrust 3y ago
Reveal it to whom? Sounds like the game already knows which websites you’ve visited without you clicking on them.
- stvltvs 3y ago
  Presumably implemented in a browser using CSS :visited the state of which is inaccessible to web programs to protect user privacy. Toggle visibility of the asteroids in CSS and let the user unwittingly disclose which websites they've visited.
itronitron 3y ago
so, the asteroids are dumb as rocks?

jonny_eh 3y ago

> but they don't actually aim at you (to keep you playing as long as possible). Sounds like they can't have them hurt you since the game doesn't know which asteroids are "real" until you've destroyed them.

LadyCailin 3y ago
Just like this site, you can put some “honeypot” ones that ARE real, and those can be aimed directly at the player, but also don’t trigger any sort of detection.

omoikane 3y ago

Not an asteroid game, but similar idea: https://lcamtuf.coredump.cx/whack/ https://lcamtuf.coredump.cx/whack/ See also "History theft with CSS Boolean algebra": https://lcamtuf.coredump.cx/css_calc/ https://lcamtuf.coredump.cx/css_calc/

bunga-bunga 3y ago
Happy to see neither one works on Safari. One says "no sites visited" and the other "both sites visited" even in incognito.
- DueDilligence 3y ago
  [dead]

trustingtrust 3y ago

Reveal it to whom? Sounds like the game already knows which websites you’ve visited without you clicking on them.

stvltvs 3y ago
Presumably implemented in a browser using CSS :visited the state of which is inaccessible to web programs to protect user privacy. Toggle visibility of the asteroids in CSS and let the user unwittingly disclose which websites they've visited.

itronitron 3y ago

so, the asteroids are dumb as rocks?