- Mar 21, 2013
- 24,761
- 31,552
Do browsers tell the sites when users are in private mode? Isn't this a major flaw?
How does NYT detect private mode?
- Thread starter bartosimpsonio
- Start date
D
Deleted member 1161191
Guest
it's simple fingerprinting of loophole. When you're in a chromium based incognito mode - FileSystem API is disabled - so script can detect incognito mode.
For example - https://jsfiddle.net/w49x9f1a/
visit above link in normal and incognito modes.
For example - https://jsfiddle.net/w49x9f1a/
visit above link in normal and incognito modes.
Houdinii
Regular Member
- Nov 12, 2012
- 282
- 424
I found a GitHub repo that's regularly updated with an interesting little script that checks for chrome, firefox, opera, safari, edge, the whole gamut. Thanks for that, learned quite a bit. :
Code:
https://gist.github.com/jherax/a81c8c132d09cc354a0e2cb911841ff1- Mar 21, 2013
- 24,761
- 31,552
it's simple fingerprinting of loophole. When you're in a chromium based incognito mode - FileSystem API is disabled - so script can detect incognito mode.
For example - https://jsfiddle.net/w49x9f1a/
visit above link in normal and incognito modes.
Nailed it.
I'm sure that's a "feature" that was "forgotten" by our privacy loving friends behind Chrome.
Interesting find. I hadn't heard of any of this till today. Shows there is massive opportunity in browsers.
Houdinii
Regular Member
- Nov 12, 2012
- 282
- 424
I just read that Google Canary will be making all this obsolete. Once they roll out this summer, I'm sure everyone will be fixing the hole. They already have it fixed in version 74.0.3718.0, which is downloadable now I believe.
- Mar 21, 2013
- 24,761
- 31,552
Curious to learn a bit more about this. Where can I learn more about it?
Houdinii
Regular Member
- Nov 12, 2012
- 282
- 424
Here's the original article I read: https://www.niemanlab.org/2019/02/y...york-times-paywall-might-be-about-to-go-away/
and one that goes in a little deeper, I think might have been part of the original article: https://9to5google.com/2019/02/15/google-chrome-detect-incognito/