Microsoft is running one of the largest corporate espionage operations in modern history. Every time any of LinkedIn’s one billion users visits linkedin.com, hidden code searches their computer for installed software, collects the results, and transmits them to LinkedIn’s servers and to third-party companies including an American-Israeli cybersecurity firm.

https://news.ycombinator.com/item?id=47613981

  • Madrigal@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    8 hours ago

    Here’s the information a web server needs to deliver content to a browser:

    • The requested resource
    • An IP address
    • User credentials (sometimes)

    Everything else is a fucking security hole. There’s no good reason for servers to know what extensions you have installed, what OS you’re running, the dimensions of your browser window, where your mouse cursor is positioned, or any one of a thousand other data points that browsers freely hand over.

    • Dnb@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 hour ago

      If the site doesn’t know the window width of can’t react to mobile or desktop users automatically or scale elements/ change to best for your display.

      You need mouse input for hovering effects as well

        • Dnb@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          55 minutes ago

          Ah I read as the Brower doesn’t need that data. I’d say it needs width (maybe height) but that’s it

          But this info talked about in OP is done via client sending the data to a server not the server getting it all the time

        • 3abas@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          38 minutes ago

          If you can do it client side, you can send it to a server…

          The difference is intent.

          • Madrigal@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            28 minutes ago

            you can send it to a server

            Yes, because web browsers, under current web architecture, allow this.

            This is entirely my point.

    • Serinus@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      6 hours ago

      There are absolutely reasons. Firefox is done by a reasonable job of anti-fingerprinting, and it’s a fine line to walk to disable as many of those indicators as possible without breaking sites.

      Browsers do give away too much, but at least Firefox is working on it. And it’s not extremely straightforward.