3 ms·

I think this should only be applicable to sites where you are logged in, as otherwise its going to be pretty difficult for them to identify using your name.

rosser 12y ago
Wrong. All it takes is a browser fingerprint. If they can associate that with a name, whether or not you're logged into the porn site — e.g., through sites that you are logged into — they can identify your browsing session on the former.
- BerislavLopac 12y ago
  But what about the incognito browsing? Would it prevent that?
  - soylentcola 12y ago
    From the article: "Web browsers leave an essentially unique footprint every time you visit a web page, even in Incognito mode (and even without supercookies). This is well established; many web tools such as Panopticlick will confirm that you give a website lots of information about your computer every time you visit."
- sparaker 12y ago
  What is this browser fingerprint? If you are talking about some cookies and the user agent string. I wouldn't be concerned.
  - Starwatcher2001 12y ago
    https://panopticlick.eff.org https://panopticlick.eff.org "Your browser fingerprint appears to be unique among the 5,053,325 tested so far."
    - bhayden 12y ago
      It seems like denying access to my plugins (and maybe non-standard fonts) would solve this. Why does a website need to know my plugins in the day and age of Flash being deprecated?
aslewofmice 12y ago
Access to IP address + browser fingerprint on two sites that you've recently visited. Doesn't seem that implausable with all the recent security breaches.
yummyfajitas 12y ago
Having built a system which does this, here is what I need you to do: Step 1: Open an incognito window and watch some british milfs getting creampied by black dudes. Step 2: go to cuteoverload.com and tweet the URL of some snuggly G-rated kittens. I've now fingerprinted you across both xhamster and cuteoverload. Additionally, once you tweeted something on cuteoverload, I just learned the the tweet_id of something attached to your twitter handle, which I tied to your browser fingerprint. Provided the tweet is public I can then get any personal info you make public in your twitter profile. Pretty straightforward docs on how to do it: https://dev.twitter.com/web/tweet-button https://dev.twitter.com/web/tweet-button https://dev.twitter.com/web/javascript/events https://dev.twitter.com/web/javascript/events I believe facebook offers similar data via the api (not sure if it includes your id), never tried to do it with pinterest.
- sparaker 12y ago
  Apparently people generally do not "tweet the URL of some snuggly G-rated kittens." Especially not using the tweet button on the porn site. Secondly this is more of a leak from public tweet rather than by visiting your websites. Unless i tweet, you have practically nothing.
  - yummyfajitas 12y ago
    Suppose I have a tag on both porno.com and kittens.com. I can fingerprint you across both sites, even if porno.com is incognito. Then you can tweet on kittens.com and I can now tie your kittens.com usage to your twitter usage. I only need you to engage in one of many non-obviously trackable social interactions ("YES send me a cute kitten every day to my email!") on kittens.com to identify you.

rosser 12y ago

Wrong. All it takes is a browser fingerprint. If they can associate that with a name, whether or not you're logged into the porn site — e.g., through sites that you are logged into — they can identify your browsing session on the former.

BerislavLopac 12y ago
But what about the incognito browsing? Would it prevent that?
- soylentcola 12y ago
  From the article: "Web browsers leave an essentially unique footprint every time you visit a web page, even in Incognito mode (and even without supercookies). This is well established; many web tools such as Panopticlick will confirm that you give a website lots of information about your computer every time you visit."
sparaker 12y ago
What is this browser fingerprint? If you are talking about some cookies and the user agent string. I wouldn't be concerned.
- Starwatcher2001 12y ago
  https://panopticlick.eff.org https://panopticlick.eff.org "Your browser fingerprint appears to be unique among the 5,053,325 tested so far."
  - bhayden 12y ago
    It seems like denying access to my plugins (and maybe non-standard fonts) would solve this. Why does a website need to know my plugins in the day and age of Flash being deprecated?

aslewofmice 12y ago

Access to IP address + browser fingerprint on two sites that you've recently visited. Doesn't seem that implausable with all the recent security breaches.

yummyfajitas 12y ago

Having built a system which does this, here is what I need you to do: Step 1: Open an incognito window and watch some british milfs getting creampied by black dudes. Step 2: go to cuteoverload.com and tweet the URL of some snuggly G-rated kittens. I've now fingerprinted you across both xhamster and cuteoverload. Additionally, once you tweeted something on cuteoverload, I just learned the the tweet_id of something attached to your twitter handle, which I tied to your browser fingerprint. Provided the tweet is public I can then get any personal info you make public in your twitter profile. Pretty straightforward docs on how to do it: https://dev.twitter.com/web/tweet-button https://dev.twitter.com/web/tweet-button https://dev.twitter.com/web/javascript/events https://dev.twitter.com/web/javascript/events I believe facebook offers similar data via the api (not sure if it includes your id), never tried to do it with pinterest.

sparaker 12y ago
Apparently people generally do not "tweet the URL of some snuggly G-rated kittens." Especially not using the tweet button on the porn site. Secondly this is more of a leak from public tweet rather than by visiting your websites. Unless i tweet, you have practically nothing.
- yummyfajitas 12y ago
  Suppose I have a tag on both porno.com and kittens.com. I can fingerprint you across both sites, even if porno.com is incognito. Then you can tweet on kittens.com and I can now tie your kittens.com usage to your twitter usage. I only need you to engage in one of many non-obviously trackable social interactions ("YES send me a cute kitten every day to my email!") on kittens.com to identify you.