LWN: Comments on "What the Internet knows about you"

Could just be some random sites.

roelofs — 2009-09-12T04:02:40+00:00

Just did not see what I expected especially no LWN.net or Groklaw which are daily visits.

Try the "all" link at upper left. LWN is something like #2168 in the "bloglines" category, apparently.

Greg

What the Internet knows about you

roelofs — 2009-09-12T04:01:03+00:00

Looks similar to startpanic.

That site (and many others like it) are listed at the bottom of the technical-details page.

Greg

Could just be some random sites.

ikm — 2009-09-04T14:56:03+00:00

The site has a fixed list of popular sites and matches your browser's history against this list by seeing which links in the list gets marked as visited and which aren't. It can't just enumerate your history as it is.

This technique actually looks useful.

dmarti — 2009-09-04T14:48:54+00:00

So yay, sites can finally show the "DIGG THIS" button only to people who actually use Digg, right? Or skip the "invite all your Orkut friends" step in the registration process.

Could just be some random sites.

Arker — 2009-09-04T04:07:48+00:00

Using FF 3.013/Windows at work, with Noscript on, I have a dozen tabs open and very long history, the site manages to pull up gmail.com. Nothing else. Odd.

What the Internet knows about you

cesarb — 2009-09-03T23:35:18+00:00

The Link Status extension (mentioned in an update at http://whattheinternetknowsaboutyou.com/docs/solutions.html) restores a bit of the lost functionality, by adding the time since the link was last visited to the status bar when you hover over the link. It also has on its preferences a checkbox to toggle layout.css.visited_links_enabled if you are using Firefox 3.5.

Could just be some random sites.

southey — 2009-09-03T18:13:47+00:00

Just did not see what I expected especially no LWN.net or Groklaw which are daily visits.

Doesn't seem to work with Firefox + NoScript

cesarb — 2009-09-03T16:58:27+00:00

Thanks for that one, now the rule I am using is

:link, :visited, :link *, :visited * { background-image: none !important }

Note that the site you linked to still shows a large red "VISITED", even though it is not logging anything anymore (you have to follow the link below the table to see nothing was actually logged). Which implies there are probably several other ways of bypassing this userContent.css rule (perhaps playing with display: and using a IMG, for instance; I haven't tested).

Doesn't seem to work with Firefox + NoScript

kfiles — 2009-09-03T15:50:50+00:00

> The hidden image trick is very easy to avoid, just add the following to
> your userContent.css:

> :link, :visited { background-image: none !important }

I've noticed that sites like
http://ha.ckers.org/weird/CSS-history.cgi

are tricker. They attach a background-image to a child of the <a> tag. For example, the following CSS rule:

a:visited span.span0 {
background: url(CSS-history.cgi?xxx);
}

applied to:
<a href="www.google.com">http://www.google.com
<span class="span0">VISITED</span>
</a>

So you'll also need the following in your userContent.css:

:link *, :visited * { background-image: none !important; }

There are million ways to detect the difference...

khim — 2009-09-03T15:17:08+00:00

Looks like links that have been recoloured by this feature should be reported to JS as though their colour has not changed.

What about size of bounding box? Position of other elements? There are a lot of possible style changes you need to hide. Doable, but this code will have a lot of bugs and exploits. So current choice: all or nothing - looks like a good compromise...

Doesn't seem to work with Firefox + NoScript

cesarb — 2009-09-03T14:20:07+00:00

The hidden image trick is very easy to avoid, just add the following to your userContent.css:

:link, :visited { background-image: none !important }

This does not disable the visited link color, only the background image, so you still need NoScript.

What the Internet knows about you

nix — 2009-09-03T12:06:38+00:00

Yes, it would: but unfortunately this feature is a major UI benefit. We shouldn't have to choose between it and security.

Looks like links that have been recoloured by this feature should be reported to JS as though their colour has not changed.

What the Internet knows about you

jebba — 2009-09-02T21:54:12+00:00

Accurately found many many links I went to. I'm running latest Fedora 11 firefox: firefox-3.5.2-2.fc11.x86_64. Sites it discovered were wikipedia, google.com.ar, timeanddate.com, worldcat, social security administration, Internet Archive, mercadolibre (argentina ebay), cnn, piratebay..., slashdot, nyt, craigslist, flikr, etc... YIKES!

What the Internet knows about you

petegn — 2009-09-02T21:46:40+00:00

> Bur setting layout.css.visited_links_enabled to false

Yep stopped it dead in it's tracks for me as well Firefox 3.5b4 openSuse 11.2MS2 x86_64

Doesn't seem to work with Firefox + NoScript

man_ls — 2009-09-02T21:34:35+00:00

This second method has been disabled temporarily due to heavy traffic, or so the page says. So now you have to enable JavaScript for a couple of sites.

does not work with my browser?

rzm — 2009-09-02T20:52:01+00:00

My favourite broser shows an empty page only. Maybe elinks CSS
implementation conforms to the proposed solutions already?
But with firefox I do see a list of 6 popular sites visited by me.

Doesn't seem to work with Firefox + NoScript

Kit — 2009-09-02T20:47:40+00:00

The site uses 2 methods, the first uses JavaScript to get the information, the second that you were redirected to uses CSS. The CSS technique basically uses the hidden image trick by setting visted urls to have a certain background image at a certain url.

And you DO have to wait a good while for it to do the scan (using javascript and css). There's a page about the technical details: http://whattheinternetknowsaboutyou.com/docs/details.html

What the Internet knows about you

slothrop3 — 2009-09-02T20:44:04+00:00

Yeah, I was scared by this too.

Bur setting layout.css.visited_links_enabled to false
in Firefox solves the problem for me.

Also interesting:
https://bugzilla.mozilla.org/show_bug.cgi?id=147777

What the Internet knows about you

shirishag75 — 2009-09-02T20:39:07+00:00

doesn't work also with chromium as well. Hangs at step 2 as well.

What the Internet knows about you

josh — 2009-09-02T20:34:57+00:00

Looks similar to startpanic.

What the Internet knows about you

RainCT — 2009-09-02T20:32:47+00:00

Same here with Firefox 3.5.

Doesn't seem to work with Firefox + NoScript

swatter — 2009-09-02T20:30:51+00:00

With Firefox 3.0.6/linux I get an (eventual) redirect to
http://whattheinternetknowsaboutyou.com/top5k?noscript=1
after which it stalls.

Presumably it's NoScript to the rescue.

What the Internet knows about you

leoc — 2009-09-02T20:30:47+00:00

Doesn't seem to want to tell me what it knows about me... it just hangs on step 2.

What the Internet knows about you

hingo — 2009-09-02T20:21:53+00:00

This is so scary but also so cool due to the simplicity of it.

What the Internet knows about you

dilinger — 2009-09-02T20:20:29+00:00

Hrm, it doesn't appear to work at all with epiphany-webkit:

"Congratulations, we did not find anything in this category in your browser history."