gmail phone verification dammit dammit dammit

[SharpConversions]

With gmail you can only create one account per ip every 48 hours (without phone)

 

[ame kaona]

i think i can help u

 

[rinkurajguru]

why dont buy pva account

 

[2939]

I never said it leaks, I specifically said a script is run. JavaScript can run extensions without your intervention, that is where the problem is. Also remember Java /= JavaScript. If you want to see the data sent use something like LittleSnitch.

I've provided you with multiple ways to verify this problem exists. FBI busting people, you can check it yourself with LittleSnitch. If you choose not to do the research or believe it, thats on you... but it doesn't mean it doesn't happen; it means your "experts" aren't really experts in the netsec field.

edit: If they're experts then they would know all this is possible. There's also a reason why eBay insists on using Adobe Flash for quick photo uploads. They can update their site but they won't because they can track you with cached Flash files too. If you choose not to believe it, that's on you, but I'm not going to sit here and educate someone not willing to learn.

Ok I did some research. And what actually happened in the FBI case was that Tor users were using an older build of Firefox browser and the exploit caused their computers to ping its identity and location to a LE controlled server. That is different from Javascript being routinely and ubiquitously used to identify your MAC ID like you imply.

What I'm wrong about is that it's impossible for Javascript to leak MAC IDs. So yeah I suppose a zero day exploit can come along and reveal the MAC IDs of the user's hardware. But would turning off javascript save you entirely from other zero day exploits?

Also I'm not sure it's as commonplace as you imply it to be. Where are you getting this info from? "It's getting pretty common for companies to run a script which sends them your MAC address during signup."

 

[rinkurajguru]

Ok I did some research. And what actually happened in the FBI case was that Tor users were using an older build of Firefox browser and the exploit caused their computers to ping its identity and location to a LE controlled server. That is different from Javascript being routinely and ubiquitously used to identify your MAC ID like you imply.

What I'm wrong about is that it's impossible for Javascript to leak MAC IDs. So yeah I suppose a zero day exploit can come along and reveal the MAC IDs of the user's hardware. But would turning off javascript save you entirely from other zero day exploits?

Also I'm not sure it's as commonplace as you imply it to be. Where are you getting this info from? "It's getting pretty common for companies to run a script which sends them your MAC address during signup."

dont u know abt webrtc exploit?

 

[Noah Hawryshko]

Ok I did some research. And what actually happened in the FBI case was that Tor users were using an older build of Firefox browser and the exploit caused their computers to ping its identity and location to a LE controlled server. That is different from Javascript being routinely and ubiquitously used to identify your MAC ID like you imply.

What I'm wrong about is that it's impossible for Javascript to leak MAC IDs. So yeah I suppose a zero day exploit can come along and reveal the MAC IDs of the user's hardware. But would turning off javascript save you entirely from other zero day exploits?

Also I'm not sure it's as commonplace as you imply it to be. Where are you getting this info from? "It's getting pretty common for companies to run a script which sends them your MAC address during signup."

Bingo.

@sewacuz , give me a Javascript file that is compatible with an up-to-date browser which echos my MAC address to the screen, and no gimmicks, I'll PayPal you $10 right now.

 

[2939]

Bingo.

@sewacuz , give me a Javascript file that is compatible with an up-to-date browser which echos my MAC address to the screen, and no gimmicks, I'll PayPal you $10 right now.

lol. If he did he definitely wouldn't give it to you for $10. I assume the exploit would be worth at least 7 figures if not 8 figures in the right hands.

 

[Rosca]

Why did you say damnit so much