News for hackers. Stuff that matters.

A comment on Replace CAPTCHAs with Private Access Tokens. Parent comment

Re:Replace CAPTCHAs with Private Access Tokens by nojito on Tuesday June 21, 2022 @12:22PM (#31825738)
https://blog.cloudflare.com/eliminating-captchas-on-iphones-...

>The website knows only your URL and IP, which it has to know to make a connection.

>The device manufacturer (attester) knows only the device data required to attest your device, but can't tell what website you visited, and doesn’t know your IP.

>Cloudflare knows the site you visited, but doesn’t know any of your device or interaction information.

[ Parent | on HN ]
Re:Replace CAPTCHAs with Private Access Tokens by feet on Tuesday June 21, 2022 @02:04PM (#31827105)
With how much data cloudflare has access to and how the market for data is, I don't believe it for a second that they can't correlate connections even if what you say is true
[ Parent | on HN ]
Re:Replace CAPTCHAs with Private Access Tokens by nojito on Tuesday June 21, 2022 @03:58PM (#31828427)
Hard to do if they just know the destination url!
[ Parent | on HN ]
Re:Replace CAPTCHAs with Private Access Tokens by feet on Tuesday June 21, 2022 @04:37PM (#31828833)
And why would they not know anything else? Is everyone on their network using tor?
[ Parent | on HN ]