Hacker News Reader

Comment by paxys | Hacker News Reader

What does that even mean? Github cannot access "tracking cookies" from Google. They have very limited data available to them (browser cookies - easily cleanable, IP address – can use VPN or just renew your lease from your ISP, other scripts – block them through a browser extension). If you are getting tracked across the internet by Github – especially as a software engineer – you are simply not trying hard enough.

View on HN

Browser fingerprinting and the such.

I'm not exactly sure how it works. But Reddit has banned my accounts whenever I make a new one and i've deleted all of my Reddit cookies, they somehow find me.

That's covered by the "browser extension" part. Firefox even does most of the blocking out of the box.

Reddit fingerprints you very aggressively. Cookies are not used here. Every single pageload, they scan all your fonts, plugins, etc.

They also exfiltrate this data back in ways to prevent blocking, by completely randomizing the API endpoint used to submit it and also not use a dedicated endpoint. For example on each pageload it might send to /submit, or /register, or /friend, it'll just pick a random valid endpoint and "front" that

They also continue to do this while you are logged out to tie your IP to the fingerprint.

    hxxps://www.redditstatic.com/reddit-init.en.4-tSxFR4sOk.js

^F "Arial"

Commonly spoofed fingerprints will result in a permanent ban automatically.

Reply on news.ycombinator.com