[{"data":1,"prerenderedAt":925},["ShallowReactive",2],{"project-12692190":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":34,"aspects":35,"strip":44,"post_text":48,"what":49,"said":68,"maker_in_thread":163,"shape":172,"grid":177,"attempts":887,"same_week":888,"maker_shows":531,"maker_hidden":917,"reader_version":918,"card":919},"12692190","Social Media Fingerprint","Your Social Media Fingerprint (maybe NSFW)","title","Show HN: Your Social Media Fingerprint (maybe NSFW)","https:\u002F\u002Frobinlinus.github.io\u002Fsocialmedia-leak\u002F","robinlinus.github.io","Capira",1476275313,2016,911,247,5,2264,1,"legend","security_privacy","browser privacy demo","web_app",[24,25,26,27,28],"browser fingerprinting","login detection","privacy","cookies","social media tracking","mixed",-0.322,{"positive":16,"neutral":32,"mixed":16,"critical":33},45,36,91,{"execution":36,"privacy":38,"idea":40,"performance":41,"docs":43},{"positive":18,"critical":37},21,{"positive":18,"critical":39},6,{"positive":18,"critical":18},{"positive":42,"critical":39},0,{"positive":42,"critical":42},[42,42,42,45,42,46,42,42,18,18,45,47,45,18,42,42,42,42,42,46,47,18,46,18,46,18,46,46,46,18,45,18,18,18,45,46,18,46,46,46],2,3,4,null,{"problem":50,"audience":48,"pricing":48,"motivation":48,"time_to_build":48,"stack":66,"openness":67,"stage":67,"team_size":67},{"value":51,"source":52,"evidence":53},"Shows which sites a visitor is logged into, exposing cross-site tracking via cookies.","inferred",[54,58,62],{"id":55,"by":56,"text":57},"12692341","dorianm","So, loading favicon.ico via a redirect-type parameter: ``` \u003Cimg onload=\"alert('logged in to fb')\" onerror=\"alert('not logged in to fb')\"…",{"id":59,"by":60,"text":61},"12692442","rosalinekarr","This 'fingerprint' changes as you login in and log out of various services, so it's not very reliable for uniquely identifying users. Regardless, it could still be used to…",{"id":63,"by":64,"text":65},"12692871","zerognowl","This is why I use 'browser isolation', which is a way to separate different types of surfing activity into different buckets. Currently the best way to do this in Firefox is to…",[],"unknown",{"praise":69,"objections":86,"requests":117,"questions":131,"alternatives":143},[70],{"value":71,"source":72,"evidence":73},"Useful demonstration of cross-site login leakage","commenter",[74,78,82],{"id":75,"by":76,"text":77},"12692267","Scirra_Tom","Very good demonstration thank you. Some interesting (an unethical) potential marketing opportunities here. For example, at the bottom of articles only show share actions for…",{"id":79,"by":80,"text":81},"12692624","stanislavb","Nice work!",{"id":83,"by":84,"text":85},"12694528","EJTH","Very simple and cool exploit. I wouldn't be surprised if this technique is already in use on various ad platforms. A really simple pitfall I think most of us can confess to…",[87,106],{"value":88,"source":72,"evidence":89},"Results are inaccurate for many users (false positives and negatives)",[90,94,98,102],{"id":91,"by":92,"text":93},"12692797","CapitalistCartr","Well its good to see its partly wrong for me. It shows HN correctly, but also shows me logged in to Facebook and Tumblr, not correct. And not logged in to gmail, which I am.…",{"id":95,"by":96,"text":97},"12697554","rasz_pl","Is this a spoof? it is 100% WRONG for me on Vivaldi browser. Says im logged to FB and nothing more. I dont even have a bookface account, but I do have gmail\u002FYT\u002Fgithub\u002Freddit and…",{"id":99,"by":100,"text":101},"12696111","Anagmate","for me, it throws several false alerts (Twitter, Flickr and few others). Is it possible that it's caused by my browser extensions (uBlock Origin, Disconnect)?",{"id":103,"by":104,"text":105},"12692259","denzil_correa","Apparently. I am not logged into anything. I tried it on Opera (along with the internal ad blocker) and I'm not using Privacy Badger.",{"value":107,"source":72,"evidence":108},"Triggered requests to an NSFW site, a workplace risk",[109,113],{"id":110,"by":111,"text":112},"12695160","Pxtl","FYI, it's very NSFW in the back-end. Your browser is sending requests to obvious porn servers when you hit this link so it can test if you're logged in to them.",{"id":114,"by":115,"text":116},"12692389","cs0","Nice, so now by using this I have an NSFW site logged in my workplace's DNS log. Be careful if your employer checks such things.",[118,125],{"value":119,"source":72,"evidence":120},"Add a warning or opt-in before running the test",[121],{"id":122,"by":123,"text":124},"12700690","DanielStraight","I don't know if anyone will read this at this point, but if you're going to proof-of-concept an exploit, please make that clear in the title or have an opt-in step with an…",{"value":126,"source":72,"evidence":127},"Remove the request to a porn site",[128],{"id":129,"by":11,"text":130},"12697643","I removed the request to Youporn. Sorry if it caused any trouble.",[132],{"value":133,"source":72,"evidence":134},"Why does it show logins the user does not have?",[135,139],{"id":136,"by":137,"text":138},"12694704","alexholehouse","So, interestingly, it had me logged in to reddit, but I don't actually have a reddit account at all. Thoughts?",{"id":140,"by":141,"text":142},"12699110","xerophyte12932","So I logged out of facebook and tried this tool again. Apparently it still shows that I am logged into facebook. I tried opening different facebook pages and it detects that I am…",[144,152],{"value":145,"source":72,"evidence":146},"Firefox Containers and browser profiles",[147,151],{"id":148,"by":149,"text":150},"12693268","daleharvey","Its only in testing right now, but Firefox Nightly has \"Containers\" so you can exactly have different \"buckets\" for different types of browsing -…",{"id":63,"by":64,"text":65},{"value":153,"source":72,"evidence":154},"Third-party cookie blocking and uBlock Origin",[155,159],{"id":156,"by":157,"text":158},"12692485","diegorbaquero","In Chrome: Settings > Privacy > Content Settings > Tick 'Block third-party cookies and site data' Also set 'Send a \"Do Not Track\" request with your browsing traffic' And install…",{"id":160,"by":161,"text":162},"12693617","whamlastxmas","Slightly easier way is to use the Disconnect\u002FPrivacy Badger extensions, along with uBlock Origin. It does a lot to prevent cookies from leaking across sites.",{"comments":16,"answered":18,"key":164},[165,166,169],{"id":129,"text":130},{"id":167,"text":168},"12692805","Couldn't find a redirect on LinkedIn that redirects without prompting you to log in again... Can you?",{"id":170,"text":171},"12692353","Renamed it. Does it make any difference?",{"commenters":173,"max_depth":174,"maker_replies":16,"first_comment_mins":175,"lifespan_hours":176},177,10,11,144,[178,180,183,186,189,193,195,199,201,203,206,209,212,214,217,221,224,227,228,232,236,239,242,245,249,252,255,258,261,264,267,270,272,274,277,279,282,285,287,289,292,294,296,299,301,304,306,308,311,314,317,320,322,325,328,330,332,334,337,340,343,346,349,351,354,357,359,362,365,369,373,376,379,382,386,389,392,394,397,399,403,406,409,412,416,418,421,422,425,427,430,433,435,437,440,442,445,447,449,452,455,458,461,464,467,470,474,478,481,484,487,490,492,494,497,499,501,504,507,510,512,513,515,518,521,524,527,530,533,535,538,540,543,545,547,549,551,554,556,558,561,564,569,573,575,578,581,584,588,590,594,598,601,605,608,611,614,617,620,622,624,626,628,631,635,637,642,645,648,650,654,657,659,662,664,665,667,670,672,676,677,679,683,687,691,693,696,699,703,706,710,713,715,717,720,722,725,729,733,736,740,742,746,751,754,757,760,764,769,773,777,781,785,787,790,794,796,800,803,807,811,815,817,819,822,825,829,832,835,838,841,844,847,850,853,855,858,861,863,866,869,871,874,876,878,881,883],[63,42,42,179,64,42],"other\u002Fneutral\u002Fprivacy",[181,42,42,179,182,42],"12692980","spacemanmatt",[184,42,42,179,185,42],"12693238","to3m",[187,42,42,179,188,42],"12696221","tankenmate",[190,42,42,191,192,42],"12696535","commenter\u002Fneutral\u002Fprivacy","welanes",[194,42,42,191,188,42],"12699415",[196,42,42,197,198,42],"12697429","commenter\u002Fneutral\u002Fnone","sliverstorm",[200,42,42,179,182,42],"12709205",[148,42,42,202,149,42],"other\u002Fneutral\u002Fnone",[204,42,42,202,205,42],"12694107","mahyarm",[207,42,42,202,208,42],"12694586","ethbro",[210,42,42,202,211,42],"12696050","Normal_gaussian",[213,42,42,197,205,42],"12697055",[215,42,42,202,216,42],"12696167","ufmace",[218,42,42,219,220,42],"12695272","other\u002Fpositive\u002Fnone","nathancahill",[222,42,42,197,223,42],"12693286","mark_l_watson",[225,42,42,202,226,42],"12693541","b101010",[160,42,42,179,161,42],[229,42,18,230,231,42],"12694899","project\u002Fcritical\u002Fexecution","jlarocco",[233,42,46,234,235,42],"12695044","project\u002Fneutral\u002Fprivacy","dwiel",[237,42,42,179,238,42],"12700274","e_proxus",[240,42,42,179,241,42],"12694060","givinguflac",[243,42,42,202,244,42],"12694350","aquilaFiera",[246,42,46,247,248,42],"12694727","project\u002Fneutral\u002Fnone","necessity",[250,42,42,179,251,42],"12694755","j_s",[253,42,42,179,254,42],"12695035","staticelf",[256,42,42,179,257,42],"12695091","Bartweiss",[259,42,42,179,260,42],"12695524","antocv",[262,42,42,179,263,42],"12695990","nitrogen",[265,42,42,202,266,42],"12696170","emodendroket",[268,42,42,202,269,42],"12696937","andai",[271,42,42,197,266,42],"12700197",[273,42,42,179,64,42],"12701376",[275,42,46,234,276,42],"12695970","brashrat",[278,42,42,191,257,42],"12696150",[280,42,42,179,281,42],"12696172","drvdevd",[283,42,42,179,284,42],"12696788","duaneb",[286,42,42,197,281,42],"12697307",[288,42,42,197,198,42],"12697416",[290,42,42,179,291,42],"12698605","derefr",[293,42,42,179,291,42],"12698584",[295,42,42,179,257,42],"12700717",[297,42,42,179,298,42],"12708535","throwaway7767",[300,42,42,179,64,42],"12699714",[302,42,42,191,303,42],"12700354","tscs37",[305,42,42,179,64,42],"12701364",[307,42,42,202,303,42],"12733715",[309,42,42,179,310,42],"12696689","joosters",[312,42,42,179,313,42],"12696925","i2shar",[315,42,42,202,316,42],"12697312","vacri",[318,42,42,202,319,42],"12698065","Ankaios",[110,18,18,321,111,42],"project\u002Fcritical\u002Fprivacy",[323,18,18,321,324,42],"12695536","throwanem",[326,18,42,191,327,42],"12695557","ktta",[329,18,18,230,324,42],"12695635",[331,18,42,191,281,42],"12696039",[333,18,18,230,324,42],"12696086",[335,18,42,197,336,42],"12696298","TeMPOraL",[338,18,42,191,339,42],"12696492","coverband",[341,18,42,202,342,42],"12697450","oldmanjay",[344,18,42,202,345,42],"12696508","ge96",[347,18,18,321,348,42],"12695662","sperglord",[350,18,46,234,327,42],"12697863",[352,18,46,234,353,42],"12696532","JoshMnem",[355,18,42,197,356,42],"12698189","Hondor",[358,18,42,179,291,42],"12698527",[360,18,42,179,361,42],"12699278","draugadrotten",[363,18,42,179,364,42],"12700046","oarsinsync",[366,18,16,367,368,42],"12695855","project\u002Fpositive\u002Fexecution","0942v8653",[370,18,46,371,372,42],"12696733","project\u002Fmixed\u002Fexecution","Zeklandia",[374,18,42,179,375,42],"12697411","Ph0X",[377,18,42,179,378,42],"12697795","subliminalpanda",[380,18,42,179,381,42],"12700925","JeremyNT",[383,18,46,384,385,42],"12697565","project\u002Fneutral\u002Fexecution","oolongCat",[387,18,46,371,388,42],"12701261","turc1656",[390,18,18,230,391,42],"12695994","user5994461",[393,18,46,384,111,42],"12696206",[395,18,18,321,396,42],"12696409","echelon",[398,18,42,197,391,42],"12703010",[400,18,46,401,402,42],"12696838","maker\u002Fneutral\u002Fnone","xexers",[404,18,42,202,405,42],"12697035","dataharry",[407,18,42,202,408,42],"12697751","simplemath",[410,18,42,202,411,42],"12698187","ganeshkrishnan",[413,18,18,414,415,42],"12697511","maker\u002Fcritical\u002Fexecution","mablap",[129,18,42,417,11,18],"maker\u002Fneutral\u002Fexecution",[419,45,42,179,420,42],"12695679","the8472",[156,46,42,179,157,42],[423,46,42,179,424,42],"12692703","JasonSage",[426,46,42,179,64,42],"12692777",[428,46,42,179,429,42],"12692825","Retr0spectrum",[431,46,42,191,432,42],"12693117","sp332",[434,46,42,191,429,42],"12693195",[436,46,42,191,432,42],"12693592",[438,46,42,179,439,42],"12693248","posterboy",[441,46,42,191,429,42],"12693355",[443,46,42,179,444,42],"12695573","admax88q",[446,46,42,191,157,42],"12693279",[448,46,42,191,429,42],"12693346",[450,46,42,179,451,42],"12693115","driverdan",[453,46,42,179,454,42],"12693836","esaym",[456,46,42,197,457,42],"12694019","Tepix",[459,46,42,197,460,42],"12697082","zymhan",[462,46,42,179,463,42],"12694803","matejn",[465,46,42,179,466,42],"12694227","JTon",[468,46,42,179,469,42],"12695141","city41",[471,46,42,472,473,42],"12695190","other\u002Fpositive\u002Fprivacy","nateberkopec",[475,46,42,476,477,42],"12695238","other\u002Fcritical\u002Fprivacy","pwenzel",[479,46,42,476,480,42],"12695550","cpeterso",[482,46,42,476,483,42],"12696285","amelius",[485,46,42,179,486,42],"12696919","minitech",[488,46,42,179,489,42],"12695893","redwards510",[491,46,42,179,216,42],"12698382",[493,47,42,202,182,42],"12692971",[495,47,42,202,496,42],"12693744","pluma",[498,47,42,202,198,42],"12697432",[500,47,42,202,496,42],"12699311",[502,47,42,202,503,42],"12693994","joshmanders",[505,47,42,202,506,42],"12694490","eonw",[508,47,42,202,509,42],"12695528","joering2",[511,47,42,202,506,42],"12709867",[55,16,46,384,56,42],[514,39,46,234,483,42],"12692876",[516,39,42,197,517,42],"12694075","trendia",[519,39,42,197,520,42],"12695863","alexbecker",[522,39,42,197,523,42],"12696099","AgentME",[525,39,46,234,526,42],"12694493","luchs",[528,39,16,529,483,42],"12696275","project\u002Fpositive\u002Fprivacy",[75,531,46,532,76,42],7,"project\u002Fmixed\u002Fidea",[534,531,42,197,483,42],"12692356",[536,531,42,197,537,42],"12692842","pbhjpbhj",[539,531,42,197,76,42],"12692950",[541,531,42,197,542,42],"12694377","CoryG89",[544,531,42,197,537,42],"12692833",[546,531,18,321,76,42],"12692942",[548,531,42,191,537,42],"12694321",[103,550,46,247,104,42],8,[552,550,46,234,553,42],"12693307","thescriptkiddie",[555,550,42,179,457,42],"12694053",[557,550,42,197,553,42],"12695246",[559,550,42,197,560,42],"12695921","icebraining",[562,550,42,179,563,42],"12725963","bzbarsky",[565,566,46,567,568,42],"12693272",9,"project\u002Fneutral\u002Fperformance","mdesq",[570,566,18,571,572,42],"12693556","project\u002Fcritical\u002Fperformance","wink",[574,566,18,571,257,42],"12695122",[576,174,18,571,577,42],"12692673","instakill",[579,174,18,571,580,42],"12693584","r3bl",[582,174,18,571,583,42],"12694335","anon4711",[585,175,46,586,587,42],"12692596","project\u002Fmixed\u002Fperformance","cha-cho",[167,175,42,589,11,18],"maker\u002Fneutral\u002Fperformance",[591,592,42,179,593,42],"12699442",12,"lensi",[595,596,46,384,597,42],"12695712",13,"bhauer",[599,596,46,384,600,42],"12695733","detaro",[602,603,46,247,604,42],"12692588",14,"sua_3000",[606,603,46,247,607,42],"12692617","maket",[609,603,46,247,610,42],"12692685","frederikvs",[612,603,18,230,613,42],"12694983","jacquesm",[615,603,42,197,616,42],"12695140","ghurtado",[618,603,42,619,613,42],"12695294","commenter\u002Fneutral\u002Fexecution",[621,603,42,197,616,42],"12695882",[623,603,42,197,613,42],"12696191",[625,603,42,197,616,42],"12701980",[627,603,42,197,613,42],"12702111",[629,603,46,384,630,42],"12692674","TallGuyShort",[632,633,42,179,634,42],"12697319",15,"tomvangoethem",[122,636,18,230,123,42],16,[638,639,16,640,641,42],"12694969",17,"project\u002Fpositive\u002Fnone","morinted",[643,644,46,384,345,42],"12696639",18,[646,644,46,384,647,42],"12696682","proaralyst",[649,644,42,197,345,42],"12697454",[651,652,46,384,653,42],"12692265",19,"fwn",[655,652,42,197,656,42],"12692333","adregan",[658,652,42,179,653,42],"12692515",[660,652,42,197,661,42],"12696025","mp3geek",[663,652,42,202,653,42],"12700152",[170,652,42,417,11,18],[666,652,46,384,653,42],"12692479",[668,652,46,234,669,42],"12693263","gorhill",[671,652,42,202,661,42],"12695817",[673,674,46,234,675,42],"12696581",20,"a3n",[91,37,18,571,92,42],[678,37,18,230,439,42],"12693092",[680,681,18,230,682,42],"12696972",22,"Joof",[684,685,46,384,686,42],"12695917",23,"throwaway049",[688,689,46,384,690,42],"12695669",24,"nodesocket",[692,689,42,619,600,42],"12695695",[59,694,18,695,60,42],25,"project\u002Fcritical\u002Fidea",[697,694,42,698,11,18],"12692586","maker\u002Fneutral\u002Fidea",[700,701,46,247,702,42],"12695937",26,"edibleEnergy",[704,705,46,384,661,42],"12696054",27,[707,708,46,384,709,42],"12692444",28,"K0nserv",[711,708,46,384,712,42],"12692563","speps",[714,708,18,230,653,42],"12692967",[136,716,18,230,137,42],29,[718,716,42,197,719,42],"12694749","sdegutis",[721,716,42,197,137,42],"12695660",[723,716,18,230,724,42],"12695106","dawnerd",[726,727,18,321,728,42],"12700076",30,"bugmen0t",[730,731,18,230,732,42],"12692386",31,"fitzwatermellow",[734,731,42,619,735,42],"12694068","TazeTSchnitzel",[737,738,18,230,739,42],"12695216",32,"owenversteeg",[140,741,18,230,141,42],33,[743,744,46,234,745,42],"12695481",34,"stabbles",[747,748,46,749,750,42],"12699697",35,"project\u002Fneutral\u002Fidea","smoyer",[752,33,18,230,753,42],"12697081","im_dario",[755,756,46,234,429,42],"12692836",37,[758,759,42,179,506,42],"12694170",38,[761,762,46,371,763,42],"12694065",39,"JoeAltmaier",[765,766,18,767,768,42],"12695490",40,"project\u002Fcritical\u002Fnone","bcheung",[770,771,18,230,772,42],"12694456",41,"dhimes",[774,775,42,202,776,42],"12695688",42,"kchoudhu",[778,779,46,384,780,42],"12692750",43,"eriknstr",[782,783,46,247,784,42],"12695723",44,"caoilte",[786,783,42,197,96,42],"12697573",[788,32,46,384,789,42],"12698777","mgalka",[791,792,18,230,793,42],"12706104",46,"paulddraper",[99,795,18,230,100,42],47,[797,798,42,202,799,42],"12697538",48,"aswanson",[801,802,46,234,391,42],"12695963",49,[804,805,18,230,806,42],"12693774",50,"eximius",[808,809,46,234,810,42],"12693157",51,"metastart",[812,813,46,234,814,42],"12698924",52,"chmike",[79,816,16,640,80,42],53,[114,818,18,767,115,42],54,[820,818,42,202,821,42],"12692458","thisisandyok",[823,818,42,202,824,42],"12692482","SaAtomic",[826,818,46,827,828,42],"12692504","project\u002Fneutral\u002Fdocs","Infinitesimus",[830,818,42,202,831,42],"12693209","brazzledazzle",[833,818,42,202,834,42],"12693644","Declanomous",[836,818,42,202,837,42],"12693432","jschwartzi",[839,818,46,234,840,42],"12693864","ryan-c",[842,818,42,202,843,42],"12697188","egh5oon",[845,818,42,846,11,18],"12692545","maker\u002Fneutral\u002Fdocs",[848,818,42,202,849,42],"12692753","YourBoss",[851,818,42,202,852,42],"12692900","JackuB",[854,818,42,202,439,42],"12693151",[856,818,42,202,857,42],"12693218","wingerlang",[859,818,46,827,860,42],"12693194","joshmcmillan",[862,818,42,202,834,42],"12693601",[864,818,42,202,865,42],"12693431","gtirloni",[867,818,42,202,868,42],"12693857","hinkley",[870,818,42,191,161,42],"12693628",[872,818,46,234,873,42],"12694081","cookiecaper",[875,818,42,179,834,42],"12694163",[877,818,42,197,161,42],"12695725",[83,879,16,880,84,42],55,"project\u002Fpositive\u002Fidea",[95,882,18,230,96,42],56,[884,885,42,191,886,42],"12694311",57,"dimino",[],[889,894,899,904,908,912],{"id":890,"name":891,"points":892,"category":893},"12694004","Tesseract.js",727,"languages",{"id":895,"name":896,"points":897,"category":898},"12679597","TagSpaces",361,"productivity",{"id":900,"name":901,"points":902,"category":903},"12677385","Nightlight",195,"dev_tools",{"id":905,"name":906,"points":907,"category":903},"12650936","Patat",167,{"id":909,"name":910,"points":911,"category":903},"12685780","Marathono",165,{"id":913,"name":914,"points":915,"category":916},"12665069","RunMyRobot",162,"hardware",false,"v2",{"id":920,"name":5,"line":6,"ai":917,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":921,"top":18,"kw":922,"maker":11,"domain":10,"tier":19,"attempts":42,"strip":923,"url":9,"mix":924,"praise":71,"objection":88,"sub":21},12692190,-0.32,[24,25,26,27,28],"0002030011242100000341313133312111231333",[16,32,16,33],1794036548519]