News for hackers. Stuff that matters.

A comment on Intelligent Tracking Prevention. Parent comment

Re:Intelligent Tracking Prevention by dullgiulio on Thursday June 08, 2017 @07:58AM (#14513474)
My proposal doesn't break anything. If site authors change things users will probably react against the sites. Currently browsing with cookies disabled works fine almost everywhere.

Moreover, a browser can easily differentiate an AJAX POST from a user submitting a form.

[ Parent | on HN ]
Re:Intelligent Tracking Prevention by tokenizerrr on Thursday June 08, 2017 @08:14AM (#14513567)
Except that most webapps are entirely javascript based and thus AJAX nowadays. But I guess we're just conveniently ignoring this?

And I'm not talking about changing anything. On most of my websites if you do a POST without having a session id (which gets assigned on first pageload, a GET), then you are a bot and your POST will be blocked. Byebye. There are many such schemes out there.

[ Parent | on HN ]