Hacker News Reader

Comment by kakkksaknmdm | Hacker News Reader

Wait for the new CSS version over which our team had a watch. Wont require JS after it comes out. ;D

Also we know many exploits to bypass noscript if we wanted to (yes I know there are bounties for this, but we were paid much higher then any public bounty for this stuff)

View on HN

As far as I understand the only way that it can work without without js is either by using @supports or similar feature/media queries (which would be the same for all users on the same hardware and browser) or by requiring user interaction (like a :hover state or clicking a link).

>Latest methods dont even use JavaScript. Just CSS is enough to identify every device uniquely but you'd need JS to send the data back.

You said:

> Wait for the new CSS version over which our team had a watch. Wont require JS after it comes out. ;D

So how does that work considering what I said above?

Why would I want to give out that part completely? Upcoming spec change has two important thing required that will allow it to work without JS or user interaction with the page. Obviously I'm not going to give it away before the spec is implemented and once it gains enough usage on the web that going back is impossible.

So basically you have no proof, no discernible connections to anything you are talking about (no real user/comment history) and are posting pretty outrageous claims about tracking.

Why would I believe you over all the public research available? If you really were working on this why would you be stupid enough to post about it here?

CSS provides basically no way to hide you’re doing this. I don’t believe this is real.

Reply on news.ycombinator.com