8 ms·
My first reaction when I read the title was that there is no way I'm giving my browser history to some arbitrary website. But I see you're using the :visited p
by xbonez 10y ago
My first reaction when I read the title was that there is no way I'm giving my browser history to some arbitrary website.
But I see you're using the :visited pseudo-class. That's actually quite genius!
- richdougherty 10y agoRight, so this site uses CSS selectors to show the user a different colour for each site they've visited. In the past the site would also be able to access the different style information rendered by the browser and use it to find out which sites you'd visited. Luckily that privacy leak was patched up a while ago: https://blog.mozilla.org/security/2010/03/31/plugging-the-css-history-leak/ https://blog.mozilla.org/security/2010/03/31/plugging-the-cs... Now you'd have to do something like use timing attacks on the browser's cache... :)
- btown 10y agoOr, since you're encouraged to hover or click on each highlighted block, Javascript could leak your information once you interact. There's no protection from the human-in-the-loop leaking their own privacy.