I've always added analytics scripts on websites I worked on. It was second nature for me. Then when I got my own start up, I didn't just add regular analytics but one that tracks mouse movements so you can watch sessions back like a video [0].
I told a friend about my start up and she jumped on it immediately. I opened the tool and watched her interaction. Then I told her "oh so you opened the dev tools" She immediately ended the session. "How did you know? That's creepy". It was the first time I've actually felt like these tools invade privacy.
Yeah, we include it in our terms and condition and privacy page, but I don't think users truly grasp how those tools work. I understand that all analytics tools provide this feature now, but its always creepy to know someone can watch what you are doing.
Nice! It shouted "Bot" when I ran this in the console
for (let i = 0; i < 1000; i++) {
document.querySelector(".button")?.click();
}
show comments
zhxiaoliang
It was the spring of 1993. UPS dropped a huge package at my door. It was Visual C++ 1.0 in a 50-story-high white box that weighed a ton. I spent the whole day reading manuals and messing with it. When my wife came home that night, I couldn't wait to show her what I finally managed to pull off -- a maximized window that contained a single button that filled the entire space of that window. And the label said "Click Me." My wife clicked that button, and nothing happened.
"What's the point?" she asked.
I said, "You can click it."
"But what's the big deal?" she was baffled.
"You can click it,“ I said.
“That's the big deal."
CSMastermind
This brings me back to the glory days of StumbleUpon. Highly recommend.
show comments
preinheimer
Heads up: there's audio. It does add something.
Barbing
Awesome. Looking for this as an iOS app, since I learned dismissing notifications phones home. (Useful feature for multidevice cloud services but can be creepy, companies learning the notifications we expand or leftswipe away… learning our sleep schedules and preferences and all that in ways we might not have specifically expected in this exact case)
Apps know when we’re on WiFi, when we force quit, have potential to have motion sensor access if opting in…
Not sure the presentation needed for acceptance into the App Store. As a security checkup tool or something…
show comments
agys
This is another gem by Amsterdam based Studio Moniker, the guys behind “Radio Garden”.
I show this in my interface programming class to introduce people to the concept of input events.
Thinking of input as a series of discrete events is an interesting cognitive model that many experienced programmers take for granted!
nihapmrm
It’s making me feel like I’m being tracked 24/7 :)
maxverse
I enjoyed playing with this. Wild how much it knows.
herpdyderp
Looks like it got HN’d to death
hspeiser
thats pretty creepy. I find it unnerving that they know exactly where my cursor is.
show comments
michaelevensen
Roel and Luna?!
10000truths
I'm getting a PR_END_OF_FILE_ERROR when I try to open the page in Firefox on Linux.
Sophira
I'm guessing this is supposed to illustrate how tracking is ubiquitous, given what I see in the source code.
In my case, though, after carefully enabling only scripts from the site and the Cloudflare CDN, but not enabling XHR/websockets back to the source page, or any cookies, the only thing that happens for me is:
1. I see a button and an exhortation to click the button.
2. I click the button.
3. The site goes "Subject has clicked the button."
4. The site goes "...".
...and then nothing else happens, no matter where I click or move my mouse. In the background I can see attempted websocket connections, but I'm blocking those so they can't happen.
If the aim of the game is to open people's eyes to the dangers of online tracking, it feels like there should be a reward mechanism if such tracking is blocked!
show comments
briandw
Very fun, I enjoyed seeing what it would react to.
alexwwang
what does it make for?
neuroelectron
I seem to be getting random events that have nothing to do with my activity. I'm on Brave on an iPad mini. I'm guessing the JS activity looks like fingerprinting and it's being spoofed.
jamiek88
Hmmm. Clever and a little spooky!
grumpymuppet
As a semi-savvy programmer, but with little experience in web-dev, I'm actually a bit ignorant of what a site can measure -- client side -- versus collect server side.
Presumably it's a simple matter to send something back to a server, but I've really never thought about the mechanisms involved.
ProAm
This is a great POC about how you give up privacy just using the web. This data is bought and sold and more and used against you every day
busymom0
I am not sure what I am looking at. It's telling me things which I expect any website to know via basic javascript. What am I missing?
I've always added analytics scripts on websites I worked on. It was second nature for me. Then when I got my own start up, I didn't just add regular analytics but one that tracks mouse movements so you can watch sessions back like a video [0].
I told a friend about my start up and she jumped on it immediately. I opened the tool and watched her interaction. Then I told her "oh so you opened the dev tools" She immediately ended the session. "How did you know? That's creepy". It was the first time I've actually felt like these tools invade privacy.
Yeah, we include it in our terms and condition and privacy page, but I don't think users truly grasp how those tools work. I understand that all analytics tools provide this feature now, but its always creepy to know someone can watch what you are doing.
[0]: https://idiallo.com/blog/spying-on-your-user
Related. Others?
Click (2016) - https://news.ycombinator.com/item?id=35841679 - May 2023 (35 comments)
Click - https://news.ycombinator.com/item?id=26518290 - March 2021 (243 comments)
Click click click - A browser-based game on online profiling. - https://news.ycombinator.com/item?id=18636038 - Dec 2018 (1 comment)
A demonstration of browser events used to monitor online behaviour - https://news.ycombinator.com/item?id=12985644 - Nov 2016 (165 comments)
Nice! It shouted "Bot" when I ran this in the console
for (let i = 0; i < 1000; i++) { document.querySelector(".button")?.click(); }
It was the spring of 1993. UPS dropped a huge package at my door. It was Visual C++ 1.0 in a 50-story-high white box that weighed a ton. I spent the whole day reading manuals and messing with it. When my wife came home that night, I couldn't wait to show her what I finally managed to pull off -- a maximized window that contained a single button that filled the entire space of that window. And the label said "Click Me." My wife clicked that button, and nothing happened.
"What's the point?" she asked.
I said, "You can click it."
"But what's the big deal?" she was baffled.
"You can click it,“ I said.
“That's the big deal."
This brings me back to the glory days of StumbleUpon. Highly recommend.
Heads up: there's audio. It does add something.
Awesome. Looking for this as an iOS app, since I learned dismissing notifications phones home. (Useful feature for multidevice cloud services but can be creepy, companies learning the notifications we expand or leftswipe away… learning our sleep schedules and preferences and all that in ways we might not have specifically expected in this exact case)
Apps know when we’re on WiFi, when we force quit, have potential to have motion sensor access if opting in…
Not sure the presentation needed for acceptance into the App Store. As a security checkup tool or something…
This is another gem by Amsterdam based Studio Moniker, the guys behind “Radio Garden”.
Some of my favorite projects:
https://studiomoniker.com/projects/radio-garden
https://studiomoniker.com/projects/do-not-touch
https://studiomoniker.com/projects/do-not-draw-a-penis
I made something very similar 2 weeks ago, re the upcoming OpenAI phone.
https://news.ycombinator.com/item?id=48040327
I show this in my interface programming class to introduce people to the concept of input events.
Thinking of input as a series of discrete events is an interesting cognitive model that many experienced programmers take for granted!
It’s making me feel like I’m being tracked 24/7 :)
I enjoyed playing with this. Wild how much it knows.
Looks like it got HN’d to death
thats pretty creepy. I find it unnerving that they know exactly where my cursor is.
Roel and Luna?!
I'm getting a PR_END_OF_FILE_ERROR when I try to open the page in Firefox on Linux.
I'm guessing this is supposed to illustrate how tracking is ubiquitous, given what I see in the source code.
In my case, though, after carefully enabling only scripts from the site and the Cloudflare CDN, but not enabling XHR/websockets back to the source page, or any cookies, the only thing that happens for me is:
1. I see a button and an exhortation to click the button.
2. I click the button.
3. The site goes "Subject has clicked the button."
4. The site goes "...".
...and then nothing else happens, no matter where I click or move my mouse. In the background I can see attempted websocket connections, but I'm blocking those so they can't happen.
If the aim of the game is to open people's eyes to the dangers of online tracking, it feels like there should be a reward mechanism if such tracking is blocked!
Very fun, I enjoyed seeing what it would react to.
what does it make for?
I seem to be getting random events that have nothing to do with my activity. I'm on Brave on an iPad mini. I'm guessing the JS activity looks like fingerprinting and it's being spoofed.
Hmmm. Clever and a little spooky!
As a semi-savvy programmer, but with little experience in web-dev, I'm actually a bit ignorant of what a site can measure -- client side -- versus collect server side.
Presumably it's a simple matter to send something back to a server, but I've really never thought about the mechanisms involved.
This is a great POC about how you give up privacy just using the web. This data is bought and sold and more and used against you every day
I am not sure what I am looking at. It's telling me things which I expect any website to know via basic javascript. What am I missing?
clever
kind of weirded me out lol...
Another one like this -
https://sinceyouarrived.world/taken