Hacker News new | ask | show | jobs
by JacobThreeThree 1569 days ago
It used to be that CSS leaked all visitor states with no user interaction. This was patched by browsers a few years back, but there are still ways to extract some data from :visited, it just requires user interaction now.

https://frantzmiccoli.github.io/visited-captcha-history/
1 comments
SahAssar 1569 days ago
That's pretty limited though. You can only check urls (not domains), and only as many urls as there are characters in the captcha.

It's a clever hack though!

link