milankragujevic

89 ms·

1. 931.▲
   by milankragujevic 12y ago

   I made a mini web browser in PHP. It's command line usage only and doesn't have a GUI and can't display images, only text. Also it's really difficult to click links since you have to type in the link number.
2. 932.▲
   by milankragujevic 12y ago

   Wasn't Atom available since forever for Windows, it's just that you have to compile it from source which I won't do so I'm not using it.
3. 933.▲
   by milankragujevic 12y ago

   I find it funny that they aren't using a Chromebook and Nexus 5 and the Nexus 7 as the product examples but instead iPhone and Macbook and iPad.
4. 934.▲
   Ask HN: Exploit disclosure, suing attempt

   7 points by milankragujevic 12y ago|5 comments
5. 935.▲
   by milankragujevic 12y ago

   What iframes? First of all, most sites don't allow themselves to be embedded into iframes, either with X-Frame-Options or a framebuster (or anti anti framebuster) scripts. Why would the script load sites into iframes? Where does it say
6. 936.▲
   by milankragujevic 12y ago

   Actually it's not using the JavaScript for checking the link color and instead is using a timing attack, so that link makes no sense.
7. 937.▲
   by milankragujevic 12y ago

   I have extended the list to include 1065 sites + 2 calibration sites. It's also now much faster and much, much more accurate.
8. 938.▲
   by milankragujevic 12y ago

   I have tried it on Safari on Windows, Opera on Windows and Chrome on Windows and it works in 99% of the cases. Also my friends tested it. It works on Opera on Android and Chrome on Android (sometimes) on Samsung Galaxy S3 Mini.
9. 939.▲
   by milankragujevic 12y ago

   Since recently, Amazon has X-Frame-Options header which forbids the browser from loading the website in a frame.
10. 940.▲
    by milankragujevic 12y ago

    Yes, it's not accurate. It's a timing attack which means you have to be on the website all the time during the processing for it to actually work. But still it does work better for smaller sets of sites (up to 7) when set up to do
11. 941.▲
    by milankragujevic 12y ago

    Either your CPU is too fast or too slow. I can't really fix anything since I don't have a Mac to test with. It works fine on Windows.
12. 942.▲
    by milankragujevic 12y ago

    I made an automated version, check it out here: http://projects.milankragujevic.com/jspy/
13. 943.▲
    by milankragujevic 12y ago

    It has problems on mobile browsers because of the variations in CPU clock speed.
14. 944.▲
    by milankragujevic 12y ago

    And I also made a jQuery plugin to make it easier to understand the code and also use it on websites. http://projects.milankragujevic.com/jquery.jspy/
15. 945.▲
    by milankragujevic 12y ago

    No, I ran the code through an optimizer and checked "remove last semicolon".
16. 946.▲
    by milankragujevic 12y ago

    Thanks for the suggestions, I implemented them, and also un-obfuscated and formatted the code. Also, now it's much faster since it doesn't use DOM.
17. 947.▲
    by milankragujevic 12y ago

    Yes, it would be crazy if it could collect history. But it can be used to target ads much better and create user "profiles" (and track users by cookies on a network of websites) and for example much better target products on an e-
18. 948.▲
    by milankragujevic 12y ago

    The website is now working, hosted on GoDaddy instead of the free 000webhost. I'm sorry for the downtime, I wasn't expecting a lot of visitors.
19. 949.▲
    by milankragujevic 12y ago

    It doesn't seem to work on Firefox. Well, it used to.
20. 950.▲
    by milankragujevic 12y ago

    I'm setting up a paid GoDaddy host as we speak...
21. 951.▲
    by milankragujevic 12y ago

    I'm measuring the time it takes for the browser to render a known visited link (this page) and a known not visited link (random url). Then after it calibrates itself it goes through every link in the list and measures the time it took
22. 952.▲
    by milankragujevic 12y ago

    Here's a mirror: https://dl.dropboxusercontent.com/u/192234503/jspy/index.htm... I'm really sorry that my hosting's down.
23. 953.▲
    jSpy: Automatically detect user's history(projects.milankragujevic.com)

    63 points by milankragujevic 12y ago|40 comments
24. 954.▲
    Stealing user’s data in creative ways(milankragujevic.com)

    2 points by milankragujevic 12y ago|0 comments
25. 955.▲
    by milankragujevic 13y ago

    The pictures are auto generated.
26. 956.▲
    by milankragujevic 13y ago

    I disagree. I don't have the time to get karma, but I would still like to comment sometimes (I'm a noob, but I've been using HN for a year already in read mode). Now with this system there's no chance for me to actually
27. 957.▲
    by milankragujevic 13y ago

    "You have reached the limit of 5 free articles a month" I haven't even used this site ever, and I'm using a mobile broadband connection so my IP is changing every time I restart my MIFI modem...
28. 958.▲
    by milankragujevic 13y ago

    Here's a command to download from zippyshare without using the website. wget http://www68.zippyshare.com/d/17397784/131268/Atom.zip \ --referer=' http://www68.zippyshare.com/v/17