3 ms·
Cool story, followed link, tried example, it doesn't work at all. Either Facebook fixed it, or it was crap.
by justin_vanw 14y ago
Cool story, followed link, tried example, it doesn't work at all. Either Facebook fixed it, or it was crap.
- deleted 14y ago[deleted]
- web007 14y agoIt only shows what FB pages have been visited - If I go to /egor.homakov and then type that in for my match string, it says that's my username. How is this different from reading link colors / setting a:visited behaviors to see where you've been? (I don't remember if browsers have fixed that "bug" or not, it's an old exploit.)
- mauricioc 14y agoThe :visited privacy-related leak is fixed in Firefox, at least: see http://dbaron.org/mozilla/visited-privacy http://dbaron.org/mozilla/visited-privacy and https://bugzilla.mozilla.org/show_bug.cgi?id=147777 https://bugzilla.mozilla.org/show_bug.cgi?id=147777 for sources.
- homakov 14y agoha, there is a NOT SAFE FOR WORK demo i made for :visited :D http://homakov.github.com/ex.html http://homakov.github.com/ex.html
- homakov 14y ago> How is this different from reading link colors / setting a:visited behaviors to see where you've been? this is completely different thing. I don't read your visited links, i read your current URL in window. and they fixed it, I recall.
- homakov 14y agoi had a typo in PoC, now it clearly works