News for hackers. Stuff that matters.

A comment on Privacy analysis of Tiktok’s app and website. Parent comment

Re:Privacy analysis of Tiktok’s app and website by Xeanort on Saturday December 07, 2019 @08:06AM (#21730077)
False: it is possible with just CSS [1][2] to track screen resolution, browser engine, fonts, mouse movements and inputs.

[1] https://github.com/jbtronics/CrookedStyleSheets

[2] https://github.com/maxchehab/CSS-Keylogging

[ Parent | on HN ]
Re:Privacy analysis of Tiktok’s app and website by shakna on Saturday December 07, 2019 @09:49AM (#21730525)
Both those methods rely on the browser not prefetching certain resources, which they are absolutely allowed to prefetch.

So if a browser changes the prefetching algo, the method is immediately broken. (For example enabling network.predictor.enable-prefetch in Firefox).

It isn't an inherent weakness of CSS itself.

[ Parent | on HN ]