> I would link to the article but JWZ shows requests with referer "news.ycombinator.com" an image that you may not like if you're at work :)

IMO anyone who has not configured their browser not to send cross-domain Referer headers deserves whatever they get. There is no user benefit for this privacy leak and browsers should have trashed it decades ago.