News for hackers. Stuff that matters.
Re:How to build an NPM worm by pferde on Friday July 13, 2018 @02:42AM (#17520957)
Wait, you guys do not block the referer your browser sends (or rather does not send)? Why would you give up information about yourself just like that?
Re:How to build an NPM worm by roboyoshi on Friday July 13, 2018 @04:30AM (#17521360)
Thanks for bringing this to my intention, it never occured to me to replace/remove the headers. RefControl is not working in the latest FF, but there is a new variant called referer-modifier: https://addons.mozilla.org/en-US/firefox/addon/referer-modif...
Re:How to build an NPM worm by pferde on Friday July 13, 2018 @05:14AM (#17521519)
Good to know, I'm running 45.9 ESR release, where it still works.
Re:How to build an NPM worm by dzek69 on Friday July 13, 2018 @02:54AM (#17520997)
It's not easy to find a mobile browser that both: - does not suck somehow, making me irritated - and has good privacy options

So I got the message too.

On the other hand, I know we are on HN, but I know hundreds of technical people, but only few of them installs privacy extensions, just the adblock. People don't care I think. I care to the extreme and I have installed uMatrix on desktop. No sane person would do that.

Btw as "soon to have" startup business I need people to inform me where they came from.

Re:How to build an NPM worm by stockkid on Friday July 13, 2018 @02:49AM (#17520979)
what is an effective way to block it?
Re:How to build an NPM worm by pferde on Friday July 13, 2018 @03:07AM (#17521034)
I use a Firefox addon called RefControl. You can set it to handle referer differently on different sites. It can block sending referer completely, or send a custom referer string.

EDIT: http://www.stardrifter.org/refcontrol/

Re:How to build an NPM worm by sverhagen on Friday July 13, 2018 @07:05PM (#17527610)
Note the sibling thread saying RefControl is broken.