News for hackers. Stuff that matters.

A comment on How to Hack APIs in 2021. Parent comment

Re:How to Hack APIs in 2021 by tannhaeuser on Tuesday August 10, 2021 @11:07AM (#28129752)
A truly intolerable thing about SPAs and JavaScript is that regular HTTP caching of images and fonts had to be limited because JS APIs can be and are used for fingerprinting, driving the whole web thing ad absurdum.

Switching off JS/fingerprinting doesn't really help either since it'll just disproportionally benefit Google's stronghold on web analytics even more.

[ Parent | on HN ]
Re:How to Hack APIs in 2021 by IX-103 on Tuesday August 10, 2021 @06:39PM (#28135650)
Fingerprinting is not just JS. Fingerprinting is possible just using CSS rules alone.

The bigger issue, which seems to be what you are complaining about seems to be the gaping hole in privacy provided by 3rd party storage/resources. That is not a particular problem with SPAs, and can even be exploited without JavaScript.

I'm not sure where you're coming from regarding Google and web analytics. When 3rd party storage is gone (or partitioned) it sounds like everyone would be on the same page in terms of what data they can collect.

[ Parent | on HN ]