Hacker News new | past | comments | ask | show | jobs | submit login

Sure do. StackOverflow's Google ad partner explicitly allows the abuse of AudioContext and other audio APIs for tracking purposes, ruining user security. [1]

These APIs leak sensitive information about your peripherals without your consent or notification [2], and is used rampantly on Google's ad network.

Try it yourself and see. Simply open up the browser console and type: (new AudioContext())

Google Chrome developers have claimed that they consider privacy and security while implementing APIs, while they actively tear down privacy and destroy security (which benefits Google's ad unit). The separation between Google Chrome's security team and DoubleClick, is, in my opinion, non-existent. As another example, DoubleClick has a hard-coded backdoor in Chrome that sends a unique browser install ID as telemetry via headers to DoubleClick domains in all requests. [3]

[1] https://meta.stackexchange.com/questions/332229/stack-overfl...

[2] https://developer.mozilla.org/en-US/docs/Web/API/AudioContex...

[3] https://chromium.googlesource.com/chromium/src/+/e51dcb0c148...




Thank you, I've got some reading to do.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: