HNHacker News
TopNewBestAskShowJobs

DavidD

53 karma · joined August 19, 2010

submissionscomments
DavidD··on Show HN: GlassBox – what the browser reveals, and how identifiable you are
If it changes every load, that's your browser farbling canvas/audio per-read (Brave or Firefox), which means the anti-fingerprinting is working. We missed crediting that in v1, so it should read lower now if you reload.
DavidD··on Show HN: GlassBox – what the browser reveals, and how identifiable you are
That panel reconstructs what a pixel would send from your own browser values, locally, and never makes the request. NextDNS seeing nothing is the tool working exactly as designed.
DavidD··on Show HN: GlassBox – what the browser reveals, and how identifiable you are
A VPN or Tor swaps it out entirely, which your browser fingerprint survives. It is a strong identifier, not a permanent one.
DavidD··on Show HN: GlassBox – what the browser reveals, and how identifiable you are
Fun fact: some malware won't execute if it sees a Russian/Ukrainian keyboard layout, because the authors avoid hitting victims in their own jurisdiction.
DavidD··on Show HN: GlassBox – what the browser reveals, and how identifiable you are
I built this after a thread here about Alibaba using an audio-context trick to fingerprint visitors. I knew a fair number of fingerprinting methods but not that one, and I wanted to see all of them in one place, running against my own browser.

GlassBox runs ~31 probes (canvas, WebGL/WebGPU, audio, fonts, the WASM feature set, math/engine quirks, WebRTC IP, timezone/locale, the permission and API matrices, an incognito heuristic, cross-site login-state, and so on) and shows the raw values plus an estimate of how identifiable you are.

A few deliberate choices:

- One static HTML file, no dependencies, no build step. Everything runs client-side and nothing is sent, with one opt-out exception: IP geolocation, which calls a public API. I didn't want a privacy tool that phones home.

- The "identifiability" number is an honest model, not a measurement. It sums published per-signal entropy (Panopticlick / AmIUnique / Cover Your Tracks), discounts signals your browser masks, and caps at the ~33 bits needed to single out one person on Earth. A no-server tool can't compute true rarity against a live population, so I label it an estimate instead of pretending. For real population numbers, Cover Your Tracks and AmIUnique have the datasets.

- There's a companion guide on lowering your fingerprint, with the caveat that uniqueness isn't privacy: blending into a big crowd (Tor at its default size) beats a bespoke hardened setup that makes you the only one who looks like that.

Source (MIT): https://github.com/HotStartLabs/glassbox

I'd genuinely like to know which vectors I'm missing, especially from the anti-fraud / detection side.

DavidD··on How Bluesky draws its logo on screenshots
https://p2ppoker.com/#how - I will opensource it soon just need some time to write it up
DavidD··on How Bluesky draws its logo on screenshots
Does anyone know a way to do this for a computer? I built a p2ppoker website the protects the shuffle from the server but I would like to blank the cards on screenshots to prevent huds and AIs from making the game unplayable.
DavidD··on We identified a North Korean hacker who tried to get a job
Congratulations you just provided source material to deepfake your staff.
DavidD··on Why hasn't commercial air travel gotten any faster since the 1960s? (2009)
Air travel can be revolutionized with a pod-based boarding system to reduce travel times and enhance safety. Passengers would have individual pods with built-in luggage compartments under their seats, allowing for fast, automated boarding and unloading. This system would eliminate the need for overhead storage and flight attendants, streamlining operations. In emergencies, each pod would feature a deployable parachute, offering increased survivability. By minimizing human touchpoints and maximizing automation, airlines could drastically cut boarding times, improve passenger privacy, and enhance overall efficiency in air travel.
DavidD··on Hezbollah pager explosions kill several people in Lebanon
My guess is they infiltrated the pager supply putting the bombs in all pagers and triggered them with Hezbollah's own encoded message system so only the guilty parties would be effected.
DavidD··on Scientists use magnetic nanotech to safely rewarm frozen tissues for transplant
Get this in my microwave stat!
DavidD··on Netflix Bids Farewell to DVDs: Could a DAO-Based Rental Model Take Its Place?
The token pays for access to the network and funds the purchase of videos and lets you vote on what's purchased next, since it would be decentralized and you wouldn't be paying people the monthly costs would be limited to website upkeep and cost of postage.
DavidD··on Netflix Bids Farewell to DVDs: Could a DAO-Based Rental Model Take Its Place?
I envision a system where the token covers the cost of your initial contribution, equivalent to the price of two DVDs, approximately $40. This not only funds the DVDs but also grants you access to our network. With the upfront cost accounted for, we can then set a more affordable monthly charge, leveraging the reduced overhead costs. Importantly, the reputation is tied to the token itself, not the wallet. So even if a user changes wallets, any fraudulent activity or complaints associated with the token will persist. After a set number of infractions or complaints, the token will be revoked. To regain access to the network, the user would need to purchase a new token.
DavidD··on Netflix Bids Farewell to DVDs: Could a DAO-Based Rental Model Take Its Place?
The Reputation System tracks user behavior, automatically banning individuals like Devious Dan after several fraudulent actions such as sending empty envelopes.
DavidD··on Netflix Bids Farewell to DVDs: Could a DAO-Based Rental Model Take Its Place?
An Insurance Pool, funded by rental fees, covers losses from fraud, with smart contracts tracking transactions and managing claims.
DavidD··on Netflix Bids Farewell to DVDs: Could a DAO-Based Rental Model Take Its Place?
It's not valuable enough to be a company but I would buy a token to get access to obscure movies every now and then.
DavidD··on Netflix Bids Farewell to DVDs: Could a DAO-Based Rental Model Take Its Place?
If they were making 150M in revenue and had a million subscribers some people derived value from the service. Not everyone has good internet connections and the selection was much larger.
DavidD··on Chat-UI, the codebase of HuggingChat, is open sourced
Not yet was hoping someone already has a project going
DavidD··on Chat-UI, the codebase of HuggingChat, is open sourced
Ok smart people how can I create a dropdown list at the top of this that will allow me to select my onsite Llama instance or use Chatgpt api instead
DavidD··on MouthPad – In-Mouth Bluetooth Mouse Uses Tongue Sensitive Trackpad
I had an In-Mouth device idea that might have a potentially bigger market and easier to make if you need a pivot idea: https://www.reddit.com/r/Futurology/comments/12kunua/explori...
DavidD··on Fungi and bacteria are binging on burned soil
Seems like we should be testing geoengineering in deserts first before we try it in much harsher environments like Mars. I think desalinated ocean water via low tech solar might be a good way to start - https://inhabitat.com/wp-content/blogs.dir/1/files/2016/08/F...
DavidD··on Google Fi seemingly affected by latest T-Mobile data breach
I had a good fireproof safe burn once it fused the sand or whatever material is between the layers of metal. I was never able to get back into it.
DavidD··on Backblaze Drive Stats for 2022
Mechanical failures were more prevalent in my experience in 90s, most of the recent stuff is usually see are controller failures. I rarely hear any head crash clicking like the old days
DavidD··on Backblaze Drive Stats for 2022
Corrupt data that would compromise the Operating systems, these were Dell computers with multiple different branded hard drives they would have us run their hardware diagnostic tool that would put them in the range to receive a free replacements. We didn't have to send back the old ones under the contract we had with them they would still work when reformatted but were less reliable after that.
DavidD··on Backblaze Drive Stats for 2022
Around a 1000
DavidD··on Backblaze Drive Stats for 2022
I have a theory that solar flares are the cause of some hard drive failures would be interesting to see if a few lead shielded cases would reduce the number of failures. I used to manage a large fleet of computers and anytime we got radio interference from solar flares we would have 3-5 hard drive failures that day.
DavidD··on Playing Military SIM War Thunder May Get You Classed as a National Security Risk
I think its time to stop printing stuff out this would prevent lots of the risk and if your position is overran like an embassy or base powering down devices would keep them safe
DavidD··on Playing Military SIM War Thunder May Get You Classed as a National Security Risk
Its weird to me how classified documents could be floating around most are generated in a SKIF and live there with people who know how to care for them properly. When I dealt with classified info it was always on a completely segregated network even the cables were protected and the network traffic is encrypted with specialized hardware(not possible to email to anyone but another authorized person). Higher level officers Colonels and Generals etc could have classified safes in their offices if they were in a protected buildings but nobody was taking anything home and logs were kept in the safe as to what was in it and random inspections would take place to confirm its accuracy.
DavidD··on Show HN: AutoHotkey for Linux
Does autohotkey have keyboard and mouse recording function when I first learned about scripting 20 years ago Winbatch had that function which took a non-programmer who just wanted to speed up repetitive tasks into an entry level programmer after a few weeks of use.
DavidD··on Pigeon – Send Messages by Carrier Pigeon
This is clearly a joke website but I think we could make this happen with gps neural link to pigeon translator. China will probably beat us to it http://content.time.com/time/world/article/0,8599,2049569,00...
Page 1 of 3Next →