3 ms·
Unless I'm missing something, it doesn't collect your history but rather can test whether you have visited a URL before. While still a problem, it's certainly a
by jasonlfunk 12y ago
Unless I'm missing something, it doesn't collect your history but rather can test whether you have visited a URL before. While still a problem, it's certainly a different thing.
- twistedpair 12y agoThis vector has been known for many years.
- eli 12y agoAnd has been largely fixed for several. See e.g. https://developer.mozilla.org/en-US/docs/Web/CSS/Privacy_and_the_:visited_selector https://developer.mozilla.org/en-US/docs/Web/CSS/Privacy_and...
- milankragujevic 12y agoActually it's not using the JavaScript for checking the link color and instead is using a timing attack, so that link makes no sense.
- milankragujevic 12y agoYes, it would be crazy if it could collect history. But it can be used to target ads much better and create user "profiles" (and track users by cookies on a network of websites) and for example much better target products on an e-commerce website... It doesn't have to be used for evil, but it certainly can, and can be automated.
- dang 12y agoOk, we changed "collect" to "detect" in the title.