News for hackers. Stuff that matters.

A comment on Volatile – A key-value pair API. Parent comment

Re:Volatile – A key-value pair API by iCarrot on Tuesday November 12, 2019 @09:17AM (#21514238)
What you just described is actually a web beacon [1], in which case the one that embed the URL is the user (and not the one who load the <img>). Web beacon can be used to implement useful thing like visitor counter service [2].

[1]: https://en.wikipedia.org/wiki/Web_beacon

[2]: https://www.hitwebcounter.com/

[ Parent | on HN ]
Re:Volatile – A key-value pair API by oefrha on Tuesday November 12, 2019 @10:46AM (#21514969)
It's also "useful" for cross-site request forgery.
[ Parent | on HN ]
Re:Volatile – A key-value pair API by iCarrot on Tuesday November 12, 2019 @11:37PM (#21521220)
Cross-site request forgery is only "useful" in auth context. There is no auth in Volatile, nor in the hit counter.
[ Parent | on HN ]