[xdkaplan]

Not to start an argument but in lamence terms, renaming history to "New Tab" is as close to wiping history as a website can manage. Concealing, obfuscating, hiding might have been better words but the non technucal audience would not see an issue with the language. Nuance is important, though and i agree its slightly misleading

[hyperhello]

I just tested it on both iPhone and Android and it does indeed remove itself from history and replaces with a link to a weather domain. That’s incredible that it is allowed and I can trivially think of a way to get someone to get to a fake banking site right now, or for that matter, fill the history with a series of visits to domestic violence sites or even worse!

[jerbearito]

https://developer.mozilla.org/en-US/docs/Web/API/Location/re...

This is known and commonly used -- since 1996. What's the risk? You can't change records about other domains.

[hyperhello]

I knew about history.replace but I had no idea you could cross sites. Suppose a site, for example, leaves a trail of Amazon Shopping, and curious, you go to it to recall what you did, but it’s Amaz0n instead.

[post-it]

Well there's no need to suppose. While I think if it hasn't been exploited in 30 years, there probably isn't an attack surface, you can always demonstrate and report an exploit.

[hilariously]

I dont think its highly exploitable, but you could get people in trouble - have them visit innocuous website during a vulnerable time window, spray a bunch of adult websites into their history, report them to the boss, future visits do not inject history items.

[100721]

What does “lamence” mean?

[caymanjim]

It's an eggcorn for "layman's".

[chopin]

What does eggcorn mean?

[hyperhello]

That's a typo.

[caymanjim]

It's not a typo. Although it's really more of a routine malapropism than an eggcorn, since it's nonsensical.

https://en.wikipedia.org/wiki/Eggcorn

[chrisjj]

> Not to start an argument but in lamence terms, renaming history to "New Tab" is as close to wiping history as a website can manage.

"I did my best" is no excuse for this critical failure to deliver as advertised.

This fail is a horrifying abuse facilitator.