Social Media Fingerprint
Security and privacy
browser privacy demo
SHOW HN2016
How HN took it
5 positive, 45 neutral or asking, 5 mixed, 36 critical, out of 91 comments about the project. Thread score -0.32.
Execution: 1 for, 21 againstPrivacy: 1 for, 6 againstPerformance: 0 for, 6 againstIdea: 1 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful demonstration of cross-site login leakage
From 3 comments
Very good demonstration thank you. Some interesting (an unethical) potential marketing opportunities here. For example, at the bottom of articles only show share actions for…
Scirra_Tom on HNNice work!
stanislavb on HNVery simple and cool exploit. I wouldn't be surprised if this technique is already in use on various ad platforms. A really simple pitfall I think most of us can confess to…
EJTH on HN
Objections
Results are inaccurate for many users (false positives and negatives)
From 4 comments
Well its good to see its partly wrong for me. It shows HN correctly, but also shows me logged in to Facebook and Tumblr, not correct. And not logged in to gmail, which I am.…
CapitalistCartr on HNIs this a spoof? it is 100% WRONG for me on Vivaldi browser. Says im logged to FB and nothing more. I dont even have a bookface account, but I do have gmail/YT/github/reddit and…
rasz_pl on HNfor me, it throws several false alerts (Twitter, Flickr and few others). Is it possible that it's caused by my browser extensions (uBlock Origin, Disconnect)?
Anagmate on HNApparently. I am not logged into anything. I tried it on Opera (along with the internal ad blocker) and I'm not using Privacy Badger.
denzil_correa on HN
Triggered requests to an NSFW site, a workplace risk
From 2 comments
FYI, it's very NSFW in the back-end. Your browser is sending requests to obvious porn servers when you hit this link so it can test if you're logged in to them.
Pxtl on HNNice, so now by using this I have an NSFW site logged in my workplace's DNS log. Be careful if your employer checks such things.
cs0 on HN
Requests
Add a warning or opt-in before running the test
From 1 comment
I don't know if anyone will read this at this point, but if you're going to proof-of-concept an exploit, please make that clear in the title or have an opt-in step with an…
DanielStraight on HN
Remove the request to a porn site
From 1 comment
I removed the request to Youporn. Sorry if it caused any trouble.
Capira on HN
Questions
Why does it show logins the user does not have?
From 2 comments
So, interestingly, it had me logged in to reddit, but I don't actually have a reddit account at all. Thoughts?
alexholehouse on HNSo I logged out of facebook and tried this tool again. Apparently it still shows that I am logged into facebook. I tried opening different facebook pages and it detects that I am…
xerophyte12932 on HN
Alternatives named
Firefox Containers and browser profiles
From 2 comments
Its only in testing right now, but Firefox Nightly has "Containers" so you can exactly have different "buckets" for different types of browsing -…
daleharvey on HNThis is why I use 'browser isolation', which is a way to separate different types of surfing activity into different buckets. Currently the best way to do this in Firefox is to…
zerognowl on HN
Third-party cookie blocking and uBlock Origin
From 2 comments
In Chrome: Settings > Privacy > Content Settings > Tick 'Block third-party cookies and site data' Also set 'Send a "Do Not Track" request with your browsing traffic' And install…
diegorbaquero on HNSlightly easier way is to use the Disconnect/Privacy Badger extensions, along with uBlock Origin. It does a lot to prevent cookies from leaking across sites.
whamlastxmas on HN