3 ms·
> an image that can only be accessed if you're logged in your google / facebook / twitter accounts I don't understand how this would work? Wouldn't there have
by ranger_danger 2y ago
> an image that can only be accessed if you're logged in your google / facebook / twitter accounts
I don't understand how this would work? Wouldn't there have to be some kind of cookie/storage that is accessible to third parties in order to know this? AFAIK this is exactly what angered people about Flash due to their use of cross-domain capable "super cookies".
- qqqult 2y agoHere's one implementation: https://browserleaks.com/social#protection https://browserleaks.com/social#protection and https://robinlinus.github.io/socialmedia-leak/ https://robinlinus.github.io/socialmedia-leak/ Click the explanation & protection sections for info on how it works
- ranger_danger 2y agoSo I read the second link and it looks to me like this is a combination of problems: the browser ignoring SOP for images, and the website just happening to expose a way to abuse that fact to check if one is logged in. I think this also assumes you are not using any kind of isolation for your tabs. What I don't understand though, is how it could figure out that I am logged into google even though I have third-party cookies disabled.