CSS History Leak and how to prevent it even with enabled history [Firefox & Opera]

[lolz]

I'm using firefox 4RC too, I just feel tired because of using two browsers at the same time. Using NoScripts. I think it'll be fine :)

[The Shutter]

I tried this yesterday on Chrome (latest dev release), opera 11.01 and Firefox 4 RC :
Chrome and Firefox Passed (The results showed none) , Opera Fail.

Opera fails because the coders don't think this is a bug

I was using Firefox 4 RC.

yeah fixed in ff4 but it's still a beta so be careful

[@Freak]

I am using latest chrome in normal mode

The folloving sites were visited:none

So if this is what i get am I good to go with What and sb-i in the same browser?

Just to doublecheck

[anon]

Opera fails because the coders don't think this is a bug

Technically, it isn't. It's a standard and perfectly valid CSS feature being abused. Private tabs will do in Opera.

[The Shutter]

Technically, it isn't. It's a standard and perfectly valid CSS feature being abused. Private tabs will do in Opera.

If you read Microsoft or Google (don't remember really) Words About this , they said that this is invade of user's privacy (you have no rights to know what websites i opened ) calling it a bug so they fixed it in the new versions except opera who said that the coders only fix bugs not a feature .

[anon]

I didn't say I didn't agree nor that the Opera team shouldn't change that. You think I like letting trackers know where I've been?

The thing is, both whoever said that and the Opera guys are right. It is a privacy invasion that uses a standard CSS feature. It'd be nice if they did the same change as Firefox and Chrome, but as they see it there's no reason to do so.

[The Shutter]

I didn't say I didn't agree nor that the Opera team shouldn't change that. You think I like letting trackers know where I've been?

The thing is, both whoever said that and the Opera guys are right. It is a privacy invasion that uses a standard CSS feature. It'd be nice if they did the same change as Firefox and Chrome, but as they see it there's no reason to do so.

nor did i say that you like that , but i hope Opera will fix this issue soon

[blubbo]

Am I safe with Google Chrome as long as I just delete my history before visiting a tracker? Should I delete my cookies too?

[bjs]

I am a little confused after reading the whole thread. Am I right on the following?

1. changing userContent.css can only solve PART of the problem;
2. disabling layout.css.visited_links_enabled should work;
3. using addon Noscript should be safe;
4. Firefox 4 and above should be safe.

For some reasons, I am still using Firefox 3.6. Also I feel Noscript is a little overkill. Does this mean that I have to use option 2 and lose the colouring feature for visited/unvisited links?

[shoulder]

1. changing userContent.css can only solve PART of the problem;

This can only prevent the "real" CSS only leak.
It can has some downsides though.

2. disabling layout.css.visited_links_enabled should work;

That one I'm not sure about, never used this option.

3. using addon Noscript should be safe;

Not alone, this only prevents the JS based leak.

4. Firefox 4 and above should be safe.

I don't know which version exactly fixed this leak, so I can't tell you for sure Firefox 4 fixed it.

For some reasons, I am still using Firefox 3.6. Also I feel Noscript is a little overkill. Does this mean that I have to use option 2 and lose the colouring feature for visited/unvisited links?

Yes, you need to combine NoScript and the custom css, or just disable your history globally.
Also, using NoScript is always a good option.
And yes, you'll lose the coloring feature.

[anon]

Am I safe with Google Chrome as long as I just delete my history before visiting a tracker? Should I delete my cookies too?

Just use incognito mode for trackers, it's less mind-boggling.

For the Firefox crowd, layout.css.visited_links_enabled=false is a catch-all solution. It prevents the leak at all times.

[THC]

Just use incognito mode for trackers, it's less mind-boggling.

So it's safe to browse SB-I in a tab and w.cd in another one at the same time?

[BrianBosworth]

So it's safe to browse SB-I in a tab and w.cd in another one at the same time?

Yes. Incognito Mode will work with any tracker(s).

[anon]

So it's safe to browse SB-I in a tab and w.cd in another one at the same time?

As long as at least one of those tabs is incognito, sure. And that way you don't need to worry about cookies and such, either. Once the window is closed, so are all traces.

[gu5t3r]

FF12 and IE9 passed all test found in this thread, I guess this leak is fixed and no need to be afraid of running SB-I and trackers in same browser...