News for hackers. Stuff that matters.
Re:Show HN: Are you trackable? An irrevocable persistent bro... by nattaylor on Tuesday September 27, 2016 @10:09PM (#12594916)
How should developers accomplish simple things like responsive design without knowing the screen size?
Re:Show HN: Are you trackable? An irrevocable persistent bro... by mindslight on Tuesday September 27, 2016 @11:15PM (#12595203)
If a design is truly responsive, it should not require javascript for doing so. The browser itself should be deciding layout policy.
Re:Show HN: Are you trackable? An irrevocable persistent bro... by uitgewis on Wednesday September 28, 2016 @03:15AM (#12595960)
You do realise that responsive design is mainly done with CSS, right?
Re:Show HN: Are you trackable? An irrevocable persistent bro... by nattaylor on Wednesday September 28, 2016 @09:13AM (#12597333)
Yes. Upon reflection it's not that relevant to this discussion, but my point is that with just simple media queries, nefarious developers can use 1x1 tracking pixels (as background images, for example) to accomplish fingerprinting.
Re:Show HN: Are you trackable? An irrevocable persistent bro... by mindslight on Wednesday September 28, 2016 @01:08PM (#12599379)
What exact method are you referring to with tracking pixels? I'm only aware of doing so based on the cache, which can be defeated by clearing the cache.

Loading pixels can be used to allow cross-site communication, but that's not really what's under discussion here (and FWIW doesn't run afoul of the security model I expect from a browser)

Re:Show HN: Are you trackable? An irrevocable persistent bro... by nattaylor on Wednesday September 28, 2016 @01:31PM (#12599557)
I recall reading about a scheme that puts a different 1x1 tracking pixel for every CSS pixel breakpoint, and then uses that as a piece of info in the fingerprint. I don't remember the details, I can't find it, and the tracker would still have to join on something (probably IP, which wouldn't work very well.)