On: Show HN: What every browser knows about you

[Capira]

Sorry! Didn't think about that. It is fixed.

[msane → Capira]

You should leave it in, if the whole point is to demonstrate the capabilities.

It's incredible that a webpage can do that.

[anp → msane]

I think a button would be more appropriate. Not everyone reads HN on a network they control and port scanning one's neighbors can lead to some unpleasant conversations.

[Too → anp]

Maybe it's good that more conversations around this are started so that eventually this critique is upstreamed loud enough to the browser vendors.

[toomuchtodo → msane]

> It's incredible that a webpage can do that.

How so? Any site you navigate to knows your IP, and can take action based on that.

[kevincox → toomuchtodo]

This isn't based on external IP. This is using JavaScript to make requests inside your LAN.

[hobs → kevincox]

Yeah I feel like samy.pl demonstrated this years ago, freaked me out and I have been running noscript ever since :D

[mavhc → hobs]

Weirdly it's wrong for me, there's LAN IPs on the list that don't exist, and it's missing ones that do. Firefox on Ubuntu, with uBlock Origin, over WiFi.

[IE6 → msane]

Agreed - good on OP to raise awareness.

[gregsadetsky → Capira]

You should also fix the copy. You have "To prevent your browser from accessing your Device Orientation use NoScript." appear twice, the second time under "Network Scan".

Congrats on the page!

[Capira → gregsadetsky]

Thanks for the bug report! It is fixed ;)