5 ms·
Click (2016)
- ProAm 5mo agoThis is a great POC about how you give up privacy just using the web. This data is bought and sold and more and used against you every day
- jamiek88 5mo agoHmmm. Clever and a little spooky!
- maxverse 5mo agoI enjoyed playing with this. Wild how much it knows.
- hspeiser 5mo agothats pretty creepy. I find it unnerving that they know exactly where my cursor is.
- ProAm 5mo agoSo does every advertiser and data broker in the world
- rolph 5mo agowould be creepiest if your cursor moved somewhere related to what you were saying outloud. the capability is there, your local hardware determines how seamless it would be.
- nomel 5mo agoI made something related to this with whisper. It would just constantly listen and periodically do a search to find a picture/video/gif from the web, relevant to what you're talking about, and show it.
- slopinthebag 5mo ago[flagged]
- sneak 5mo agoThis demonstrates a surprising lack of empathy. It’s unnerving because people don’t like being watched.
- slopinthebag 5mo agoPeople aren't being watched...
- raincole 5mo agoHN comments really can't beat the spectrum stereotypes... But seriously, the parent comment isn't saying the technical fact a browser can see your cursor's coordinate is unnerving. They're saying the experience of being reminded of this fact is unnerving. Technically, every time you take a bus ride the driver can just decide to crash the vehicle and kill the passengers and himself. This fact itself isn't unnerving -- it's just how buses work. But if there were a poster on the bus reminding passengers of that, that'd be quite unnerving.
- LeoPanthera 5mo agoYou might like Pointer Pointer. It's pretty funny. https://pointerpointer.com https://pointerpointer.com (It might not work on touch screens.)
- _carbyau_ 5mo agoAnd yet, so many people think Cursor-camp[0] is great. Mental framing of a tech is weird. [0]https://neal.fun/cursor-camp/ https://neal.fun/cursor-camp/
- preinheimer 5mo agoHeads up: there's audio. It does add something.
- claysmithr 5mo agokind of weirded me out lol...
- busymom0 5mo agoI am not sure what I am looking at. It's telling me things which I expect any website to know via basic javascript. What am I missing?
- layer8 5mo agoThat you’re not the target audience.
- 10000truths 5mo agoI'm getting a PR_END_OF_FILE_ERROR when I try to open the page in Firefox on Linux.
- BudaDude 5mo agoNice! It shouted "Bot" when I ran this in the console for (let i = 0; i < 1000; i++) { document.querySelector(".button")?.click(); }
- jagged-chisel 5mo agoUsed this and it replied (in the console): "Such a smart subject." ETA: It also took a few seconds to get around to telling me (from the bottom up): Subject has clicked on the button a thousand times. Subject has clicked on the button one hundred times. Subject clicks less than most other subjects. Subject has run script to click on the button ten times within one second. Subject has clicked on the button nine times within one second. Subject has clicked on the button eight times within one second. I wonder if it can distinguish between human clicks and scripted clicks if it's saying "...clicks less than most..." or if everyone is scripting a million clicks.
- sheept 5mo agoIt can[0] but I'm not sure if it's using that for the comparison. [0]: https://developer.mozilla.org/en-US/docs/Web/API/Event/isTrusted https://developer.mozilla.org/en-US/docs/Web/API/Event/isTru...
- d4rkp4ttern 5mo agoAnother one like this - https://sinceyouarrived.world/taken https://sinceyouarrived.world/taken
- foxfired 5mo agoI've always added analytics scripts on websites I worked on. It was second nature for me. Then when I got my own start up, I didn't just add regular analytics but one that tracks mouse movements so you can watch sessions back like a video [0]. I told a friend about my start up and she jumped on it immediately. I opened the tool and watched her interaction. Then I told her "oh so you opened the dev tools" She immediately ended the session. "How did you know? That's creepy". It was the first time I've actually felt like these tools invade privacy. Yeah, we include it in our terms and condition and privacy page, but I don't think users truly grasp how those tools work. I understand that all analytics tools provide this feature now, but its always creepy to know someone can watch what you are doing. [0]: https://idiallo.com/blog/spying-on-your-user https://idiallo.com/blog/spying-on-your-user
- htx80nerd 5mo agoEveryone knows stores have security cameras. But if you called them up and said 'I saw you pick up the chips' they wouldnt have a good feeling. Everyone understands websites use analytics and tracking, but people dont want to be reminded of it. Which is why people hate those FB ads which exactly match what you searched for 24 hours ago.
- EGreg 5mo ago[flagged]
- philipwhiuk 5mo ago> Everyone understands websites use analytics and tracking, but people dont want to be reminded of it. People don't want it to be misused is the actual point.
- jrowen 5mo agoI think there's a very interesting duality forming around privacy. It seems like most people don't really care if they're being filmed, or if their data is being slurped up six ways from Sunday, as long as it's aggregated and going through automated systems. But as soon as it feels like an actual person is looking at individual behavior, it's creepy (which is, of course, always a possibility, but plausible deniability is a powerful thing).
- CSMastermind 5mo agoThis brings me back to the glory days of StumbleUpon. Highly recommend.
- ge96 5mo agoI was thinking of the paper clip universe simulator game Where you're just sitting there clicking over and over
- RetroTechie 5mo agoAka incremental game
- ge96 5mo agolol reminds me https://www.youtube.com/watch?v=aOw1uR-q3pA https://www.youtube.com/watch?v=aOw1uR-q3pA
- briandw 5mo agoVery fun, I enjoyed seeing what it would react to.
- gblargg 5mo agoI was disappointed that it didn't catch me editing the HTML when I tried changing the button's class to button2 or adding other classes. I wanted it to call me out when I clicked after that edit.
- herpdyderp 5mo agoLooks like it got HN’d to death
- mrkn1 5mo agoI made something very similar 2 weeks ago, re the upcoming OpenAI phone. https://news.ycombinator.com/item?id=48040327 https://news.ycombinator.com/item?id=48040327
- danielrmay 5mo agoThis is really neat, and disturbing.
- mrkn1 5mo agothank you and alas yes, the image understand is the only LLM, the rest has been available on browsers through js since the 2000s
- ZeWaka 5mo agoThe image processing is neat. Local model ran in the browser?
- mrkn1 5mo agothank you! actually it's an API call to a VL model on Deepinfra (model is Qwen3-VL-30B-A3B-Instruct)
- grumpymuppet 5mo agoAs a semi-savvy programmer, but with little experience in web-dev, I'm actually a bit ignorant of what a site can measure -- client side -- versus collect server side. Presumably it's a simple matter to send something back to a server, but I've really never thought about the mechanisms involved.
- deleted 5mo ago[deleted]
- deleted 5mo ago[deleted]
- deleted 5mo ago[deleted]
- Barbing 5mo agoAwesome. Looking for this as an iOS app, since I learned dismissing notifications phones home. (Useful feature for multidevice cloud services but can be creepy, companies learning the notifications we expand or leftswipe away… learning our sleep schedules and preferences and all that in ways we might not have specifically expected in this exact case) Apps know when we’re on WiFi, when we force quit, have potential to have motion sensor access if opting in… Not sure the presentation needed for acceptance into the App Store. As a security checkup tool or something…
- Sophira 5mo agoI'm guessing this is supposed to illustrate how tracking is ubiquitous, given what I see in the source code. In my case, though, after carefully enabling only scripts from the site and the Cloudflare CDN, but not enabling XHR/websockets back to the source page, or any cookies, the only thing that happens for me is: 1. I see a button and an exhortation to click the button. 2. I click the button. 3. The site goes "Subject has clicked the button." 4. The site goes "...". ...and then nothing else happens, no matter where I click or move my mouse. In the background I can see attempted websocket connections, but I'm blocking those so they can't happen. If the aim of the game is to open people's eyes to the dangers of online tracking, it feels like there should be a reward mechanism if such tracking is blocked!
- jagged-chisel 5mo agoI unlocked at least one "achievement" by blocking camera access.
- dang 5mo agoRelated. Others? Click (2016) - https://news.ycombinator.com/item?id=35841679 https://news.ycombinator.com/item?id=35841679 - May 2023 (35 comments) Click - https://news.ycombinator.com/item?id=26518290 https://news.ycombinator.com/item?id=26518290 - March 2021 (243 comments) Click click click - A browser-based game on online profiling. - https://news.ycombinator.com/item?id=18636038 https://news.ycombinator.com/item?id=18636038 - Dec 2018 (1 comment) A demonstration of browser events used to monitor online behaviour - https://news.ycombinator.com/item?id=12985644 https://news.ycombinator.com/item?id=12985644 - Nov 2016 (165 comments)
- xiaoluolyg 5mo agoclever
- zhxiaoliang 5mo agoIt was the spring of 1993. UPS dropped a huge package at my door. It was Visual C++ 1.0 in a 50-story-high white box that weighed a ton. I spent the whole day reading manuals and messing with it. When my wife came home that night, I couldn't wait to show her what I finally managed to pull off -- a maximized window that contained a single button that filled the entire space of that window. And the label said "Click Me." My wife clicked that button, and nothing happened. "What's the point?" she asked. I said, "You can click it." "But what's the big deal?" she was baffled. "You can click it,“ I said. “That's the big deal."
- rtgfhyuj 5mo ago[flagged]
- zhxiaoliang 5mo agoYes. It was 1993 -- there was no Internet to search for anything. The manual that came with Visual C++ could fill a small library, and the program itself came on two dozen floppy disks. And me being a not-so-bright junior programmer didn't help either.
- jml7c5 5mo agoThat reminds me of this story, from developing for the Playstation: >In the main engineering room, there was a whoop and cry of success. >Our company financial controller and acting HR lady, Jen, came in to see what incredible things the engineers and artists had come up with. Everyone was staring at a television set hooked up to a development box for the Sony Playstation. There, on the screen, against a single-color background, was a black triangle. >“It’s a black triangle,” she said in an amused but sarcastic voice. One of the engine programmers tried to explain, but she shook her head and went back to her office. I could almost hear her thoughts… “We’ve got ten months to deliver two games to Sony, and they are cheering over a black triangle? THAT took them nearly a month to develop?” https://rampantgames.com/blog/?p=7745 https://rampantgames.com/blog/?p=7745
- zhxiaoliang 4mo ago
- pokpokpok 5mo agoI show this in my interface programming class to introduce people to the concept of input events. Thinking of input as a series of discrete events is an interesting cognitive model that many experienced programmers take for granted!
- neuroelectron 5mo agoI seem to be getting random events that have nothing to do with my activity. I'm on Brave on an iPad mini. I'm guessing the JS activity looks like fingerprinting and it's being spoofed.
- alexwwang 5mo agowhat does it make for?
- nihapmrm 5mo agoIt’s making me feel like I’m being tracked 24/7 :)
- aiverdict 5mo ago[dead]
- michaelevensen 5mo agoRoel and Luna?!
- agys 5mo agoThis is another gem by Amsterdam based Studio Moniker, the guys behind “Radio Garden”. Some of my favorite projects: https://studiomoniker.com/projects/radio-garden https://studiomoniker.com/projects/radio-garden https://studiomoniker.com/projects/do-not-touch https://studiomoniker.com/projects/do-not-touch https://studiomoniker.com/projects/do-not-draw-a-penis https://studiomoniker.com/projects/do-not-draw-a-penis
- andrew_kwak 5mo ago[dead]
- lovegrenoble 5mo agoJust as fun as Poke, poke, poke... https://calm.ovh https://calm.ovh
- pranshuchittora 5mo agoPeak unemployment ;)
- ivolimmen 5mo agoI can clearly hear a fellow countryman. There is something very distinctive when Dutch people speak English. Very nice website. Very informative.
- tommit 5mo agosübject has clicked the bütton or ist it more of an ö? (im German btw but can also definitely spot a dutch English speaker :) best way to tell is to have them say "I have an idea!"
- adychandra 5mo agoAvast is flagging website as malicious
- mwigdahl 5mo agoIs it capturing and selling user data? Avast would certainly know.
- MagnoApi 5mo agoCool website
- 1vuio0pswjnm7 5mo agohttp://cdnjs.cloudflare.com/ajax/libs/socket.io/1.7.3/socket.io.js http://cdnjs.cloudflare.com/ajax/libs/socket.io/1.7.3/socket... http://cdnjs.cloudflare.com/ajax/libs/gsap/1.18.0/TweenMax.min.js http://cdnjs.cloudflare.com/ajax/libs/gsap/1.18.0/TweenMax.m... Some of the Javascript is served via plain HTTP as well as HTTPS https://clickclickclick.click/bundle.js https://clickclickclick.click/bundle.js This is 14 MB of Javascript Using HTTP/1.1, the norm in 2016, I counted 233 chunks Might as well just ask the user to download a 15 MB executable, e.g., a "game", and run it Developers often refer to this idea of the "browser sandbox" but there are lots of things that are permitted inside this "sandbox" that some users would consider part of their "threat model" For example, gratuitous data collection, surveillance and advertising