Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by fredgrott | Hacker News Reader

Parent Full thread

fredgrott·

who would believe such as statement that info is not collected or sent?

I have some prime real estate in Florida to sell you if you do!

View on HN

Not really sure what use knowing my wifi password would be unless you were specifically stalking me anyway.

You have a password and an SSID for somewhere in the world (maybe, if they didn’t lie) or if tracing IP addresses, somewhere in a neighbhourhood or city).

Seems about as useful as an MH 370 flight data recorder password (if such things exist). Yes, you could break into the black box with it, but that’s not the real problem.

Luckily, you don’t have to believe - you can see for yourself by opening Developer tools in your browser and monitoring requests under the Network tab.

I don't think this simple app would have bad intentions, but your workaround isn't bulletproof either. The fact that the user has opened Dev Tools is detectable (I think the console object becomes != null?), so if the author has bad intentions, he can just unload the bad stuff when he detects that Dev Tools has been opened.

I've seen some sites unload the page and set up a breakpoint when Dev Tools is opened, so you can't even browse the source in it. I guess the trick would be to download the page's sources using wget, but if they used some obfuscation it becomes more painful to figure out what files need to be downloaded...

No belief is required; the source is available.

Open your network tab and watch for traffic if you want. Or turn off wifi after loading.

Reply on news.ycombinator.com