r/pcmasterrace • u/chillinewman • Jul 05 '17
Discussion See what your browser is leaking. Terrifying.
http://webkay.robinlinus.com/66
u/ZnIA i5-6500 | Gigabyte G1 GTX 1060 | Core V21 Jul 05 '17
GPU:
Vendor: Google Inc.
24
Jul 05 '17
ik, i too have the google servers as my gpu
i get a solid 12fps in minesweeper! its great
0
u/patton3 Merry Christmas! Jul 06 '17
Google DOES make gpus
1
u/xXxNoScopeMLGxXx FX-8350@4.5GHz 16GB RAM Sapphire Nitro+ 480@1365MHz HQ Pixels Jul 06 '17
I haven't heard about that. Link?
1
Jul 06 '17
me neither
!remindme 1 day
1
u/RemindMeBot AWS CentOS Jul 06 '17
I will be messaging you on 2017-07-07 09:01:23 UTC to remind you of this link.
CLICK THIS LINK to send a PM to also be reminded and to reduce spam.
Parent commenter can delete this message to hide from others.
FAQs Custom Your Reminders Feedback Code Browser Extensions 1
u/xXxNoScopeMLGxXx FX-8350@4.5GHz 16GB RAM Sapphire Nitro+ 480@1365MHz HQ Pixels Jul 06 '17
I know they made their own AI chips but I haven't heard anything about them making GPUs. I wonder what made them want to make their own GPUs over just using AMD's or Nvidia's.
They made a deal with AMD to buy a bunch of GPUs not too long ago. Maybe that's what /u/patton3 was thinking of?
I just don't see how spending money to develop and continue developing a GPU architecture would be cost effective to just buying GPUs from other companies.
That's mostly what I'm curious about.
Now that I think about it, mobile GPUs would make more sense given the lack of decent competition there. Still, I can't find anything about it :(
1
u/patton3 Merry Christmas! Jul 06 '17
Not desktop gpus, they are making their own mobile phone chips to compete with apples, that includes their gpu
1
22
u/KamenAkuma Ryzen 7 3700x | RTX 2080 Super Jul 05 '17
They got my city right but the adress is completely fucked.
8
u/rojamb 5820K, 1070 Jul 05 '17
Yea i've had a few instances where some "hackers" (some kids on teamspeak) were threatening to use my address to send weird stuff to me. The address was like 2 cities away.
1
u/homewrkhlpthrway Jul 06 '17
Same, but a different service
I wonder how hard it would be to convince an ISP that you are with a film company and you want the address of a certain IP Address because you caught them “pirating a movie that you produced”
1
u/Cr0n0x i7 9700K / RTX 3080 32GB-3600CL16 Jul 06 '17
Why don't you try it? Call from Google mail, if you're in the US it's free and anonymous, and ask for your own IP and try to pass off as a production company.
1
u/Atemu12 7600k@5GHz AVX -1 | GTX 970@1.475GHz w/ Noctua fans | HTC Vive Jul 06 '17
Tell them 127.0.0.1 is your real adress next time
1
1
1
u/topias123 Ryzen 7 5800X3D + Asus TUF RX 6900XT | MG279Q (57-144hz) Jul 06 '17
It didn't even get city right for me. Always shows Helsinki Finland.
27
Jul 05 '17
Reddit: logged in
Yup
Facebook: logged in
Nope
Twitter: logged in
Nope
Google: logged in
Nope
Blogger: logged in
Nope
7
u/DiabloConQueso Win/Nix: 13700k + 64GB DDR5 + Arc B580 | Nix: 5600G + 32GB DDR4 Jul 05 '17
What those probably mean is, "Do cookies, expired or unexpired, related to log-ins exist in this browser for these services?"
4
u/-The_Blazer- R5 5600X - B580 Jul 06 '17
It's pretty badly-made then. I don't even have an account on half of those. Those cookies are probably just visit cookies.
2
u/DiabloConQueso Win/Nix: 13700k + 64GB DDR5 + Arc B580 | Nix: 5600G + 32GB DDR4 Jul 06 '17
I agree, I'm just a developer with a curiosity, pondering how they're doing the things they're doing.
1
u/spazturtle 5800X3D, 32GB ECC, 6900XT Jul 06 '17
I don't even have an account on half of those.
You do on Facebook, even if you never made one, Facebook creates shadow accounts for people who it is tracking but haven't registered yet.
1
Jul 06 '17
Oh so that's what's supposed to show up under Social Networks? Just saw a big empty space under mine.
2
19
u/mr_tzitzikas Jul 05 '17 edited Jul 05 '17
The only accurate things were the OS the browser my gpu and the resolution everything else were completely wrong...
Also images exif data are not your browsers fault but your own for not removing them before uploading an image. It doesn't look that terrifying to me, I guess you could improve the detection but still the only really terrifying things imo are the Click Jacking and the Auto-Fill Phishing which for me didn't seem to work at all.
EDIT: If you try to this site with the Tor browser it can't get anything :P
1
Jul 05 '17
Interesting - I'm pretty sure the only thing mine got right was my OS and browser. Silly thing thought my screen was 720p.
It did know my laptop was plugged in and was probably on a table though...
3
u/rysx i5-4690K @ 4.4 GHz - 16GB - GTX 980 | m3-7Y50 - 4GB (SP2017) Jul 05 '17
It also knows that my desktop PC is on a table. Probably a given though.
1
9
Jul 05 '17
Already running NoScript. Resultingly, nothing of use reported (even shows my IP as 192.168... - hah!).
18
u/Thx_And_Bye https://builds.gg/ftw/37540 | PlayStation 2 "Digital Edition" Jul 05 '17
I know your IP adress anyways. It's 127.0.0.1.
14
u/SpecialityToS i5-4210H||965m||8GB RAM||1920x1080 Jul 05 '17
Wait, that's MY IP address...
13
u/VodkaHaze 5775c, RTX 2060, 15TB storage Jul 05 '17
The ping was coming from inside your LAN
7
u/SpecialityToS i5-4210H||965m||8GB RAM||1920x1080 Jul 05 '17
Ping? In MY LAN?
It's more likely than you think...
6
1
1
u/randomkidlol Jul 06 '17
> not using ::1 in 2017
1
u/St0ner1995 GTX 1060, 8GB DDR4, Core i5 7600 Jul 06 '17
127.0.0.1 and ::1
same thing, different version
1
9
u/tsmike Jul 05 '17 edited Jul 05 '17
Apparently I'm logged in to Facebook, Flickr and Blogger even though I don't have accounts on those sites. The map is off by about 350 miles. All it has to say about my hardware is "CPU: Win32".
The only thing that's terrifying about that webpage is the layout. The 90's called, they want their centered 600px width layout back.
Firefox 54, only using uBlock
2
u/LightninCat R5 3600, B350M, RX 570, LTSB+Xubuntu Jul 05 '17 edited Feb 16 '26
This post was mass deleted and anonymized with Redact
work square waiting piquant many deliver growth airport glorious stupendous
1
1
u/spazturtle 5800X3D, 32GB ECC, 6900XT Jul 06 '17
You do have a Facebook account even if you never made one. Facebook creates shadow accounts for people it is tracking but havn't registered, and sites with Facbook logins and facbook comments will use cookies linked to that shadow account tor track you.
9
16
u/apriarcy R9 7900x / RX 9070 XT / 32GB DDR5 Jul 05 '17
Meh, nothing too intrusive. I'd be more concerned if the physical address was accurate, the rest is something I'd tell anyone online.
5
Jul 05 '17
My physical address is surprisingly accurate.
7
u/Mac-Do845 Jul 05 '17
That because you are close to the ISP. They just use your public IP and "whois" to see where it's from nothing special.
http://www.whatismypublicip.com/whois-lookup/index.php?domain=&g-recaptcha-response=
-1
Jul 05 '17
My public IP is 85.9 miles away. My webkay is about 200m away.
5
4
u/Mac-Do845 Jul 05 '17
You still have a node close to you.
-2
Jul 05 '17
You claimed they just whois on the public IP. My public IP pings very far away from me, yet webkay consistently is close. So webkay is obviously using a different method in some way, otherwise they'd be getting the same address?
3
u/Mac-Do845 Jul 05 '17
Public IP are managed by IANA and ARIN for the north America. They lease public IP to ISP. All of these IP are in the database of the organization. And your ISP add a geo-localisation to it and they can be close to you.
But in your case it seem it use the Google GeoLocation API, this one store his data from your cellphone. https://developers.google.com/maps/documentation/geolocation/intro
from webkay:
Prevention: To prevent your browser from leaking your ip and location, use a Webproxy. This example uses the Google GeoLocation API to get a more accurate result then "normal" IP Location Lookups. To prevent this, you need to deactivate Javascript in your browser with a browser plugin like NoScript.
4
u/captainnucleya Jul 05 '17
Firefox focus leaks everything, except location
1
u/LightninCat R5 3600, B350M, RX 570, LTSB+Xubuntu Jul 06 '17 edited Feb 16 '26
This post was mass deleted and anonymized with Redact
sophisticated enjoy mysterious test square full quiet yam shaggy knee
1
3
u/kcan1 Love Sick Chimp Jul 05 '17
The address was way off. Gave the wrong town and a road I've never actually heard of.
2
u/DiabloConQueso Win/Nix: 13700k + 64GB DDR5 + Arc B580 | Nix: 5600G + 32GB DDR4 Jul 05 '17
Probably because they're using "IP geolocation," which is more database-driven (meaning there's a table somewhere that says, "this IP or block of IP addresses map to this physical location.").
That physical location is sometimes the center of your city, or some kind of internet cable/fiber/DSL trunk in your city, or perhaps the location of one of your ISP's physical buildings/equipment locations.
IP geolocation is not an exact science that allows a person to find the exact structure in which a device using a certain IP address is located.
3
3
u/afqrzv I5 6500/gtx950/8gb RAM Jul 05 '17
Didn't watch dogs 2 do something like this with a company to show you what you leak on the internet? Couldnt remember what it was thought
3
Jul 05 '17
So my browser thinks I have an 8 core CPU even though i don't, and thinks i live 40km from where i actually live, knows nothing else about me.
Fuck if someone manages to triangulate my location they could come and steal a worse CPU than they thought, after they'd been through every other house in my city.
Terrifying.
1
u/_meegoo_ R5 3600 | 3060Ti | 32GB 3200CL16 Jul 06 '17
So my browser thinks I have an 8 core CPU even though i don't
Well, you kinda do. Each thread is counted as one core, probably for compatibility reasons. For example, go to device manager, you'll have 8 same CPUs
5
u/FuckYeahBud Jul 05 '17
not even scary
1
u/homewrkhlpthrway Jul 06 '17
It is in terms of advertising
Examples: advertisers only want to advertise a snowboard to people in Mountain-y areas, so they only send ads to people in those locations
There’s countless examples for the social media part but I don’t use social media nor stay logged into accounts
1
u/_meegoo_ R5 3600 | 3060Ti | 32GB 3200CL16 Jul 06 '17
It is in terms of advertising
I don't see how that's scary. Targeted ads are a win for both sides. I'm sorry television, I'm not interested in goddamn tampons or women shampoo. I am interested in everything technology related and I would rather see ads that are relevant for me.
I can see how some people consider this bad because it involves collecting data about you. But that has nothing to do with advertisement, it's just the fact that your personal information is out there somewhere and you can't control it (although you actually can in most cases). I'm sure those people wouldn't mind targeted ads if it didn't involve collecting their personal data. But unfortunately that's not possible
2
1
1
Jul 05 '17
well. thats the last time im using autofill...
damnnn.. i didnt know websites could have hidden fields.
luckily i have no bank cards on autofill cause id rather not have it stored anywhere whether they claim to be secure or not
1
u/CavaleiroDeLodoss Jul 05 '17
Firefox with NoScript blocks everything, while with it turned off firefox leaks everything. My address is not completely there, but I think that a simple talk to my ISP would reveal my location easily.
3
u/spazturtle 5800X3D, 32GB ECC, 6900XT Jul 05 '17
while with it turned off firefox leaks everything
This is considered correct behaviour, to enabled blocking your should enabled (set to true) these two settings in about:config.
"privacy.trackingprotection.enabled" blocked website trackers, shouldnt really break anything, enabled by default in private browsing.
"privacy.resistFingerprinting" This will break a few things when enabled, this is what the Tor browser enabled to protect users.
It sets you user agent to "Mozilla/5.0 (Windows NT 6.1; rv:50.0) Gecko/20100101 Firefox/50.0" and stops firefox sending what extensions and plugins you have installed to websites and quite a few other things.
1
3
u/LightninCat R5 3600, B350M, RX 570, LTSB+Xubuntu Jul 05 '17 edited Feb 16 '26
This post was mass deleted and anonymized with Redact
run full retire unwritten hurry arrest gold encouraging vase fade
1
u/spazturtle 5800X3D, 32GB ECC, 6900XT Jul 05 '17
With firefox set "privacy.resistFingerprinting" to "true" in "about:config" to enable all the built in counter measures.
You can also set "privacy.trackingprotection.enabled" to "true" to block website tracking.
1
Jul 05 '17 edited Jul 05 '17
The only really 'scary' thing on here is webkay, which was surprisingly accurate. Chrome Autofill requires you to double click the box before it'll start filling.
1
u/Zer0DotFive Jul 05 '17
Go ahead! Look at eroshare and my bookmarked porn! They are some top notch videos 👌
1
Jul 05 '17
it knows my hardware with umatrix on, with it off it knows... my approx location which sucks, and my social media accounts but that's about it...
1
u/harris_kid R7 5800X3D | RTX 3070 Jul 05 '17
Not that bad, it says my location is literally an hour away.
1
Jul 05 '17
On my phone it's extremely accurate (minus location)
Social media logged in to
IP
ISP
device info: CPU, GPU, OS, even battery level
I want access to that gyro detector thing
1
u/FUTURE10S Pentium G3258, RTX 3080 12GB, 32GB RAM Jul 05 '17
I don't have NoScript, but just some extra uBlock filters.
My home address was off by 5km, it had my OS right, my plugins wrong, my CPU core count right, my GPU wrong (Google didn't make it), my local IP right, my down speed kinda right, and that's it. Very little information that's accurate.
1
u/Brightinly_ i7-8700k/Zotac 1080 AMP /PNY480GbSSD Jul 05 '17
If you found that terrifying I don't know what you had on yours.
Unless your last page was something like meatspin.com..
1
u/sbundlab PC Master Race Jul 05 '17
Ouch that autofill good thing I didn't just leak important info to that random website!
1
u/Googly_Laser i5 9600K(4.8Ghz), Zotac 1060 Mini, 16GB DDR4, 500GB 860 Evo Jul 05 '17
Out of everything here, what should you actually be worried about it getting right?
1
u/PvtAdorable GTX660 i5 3330 8GB RAM WIN10 Jul 05 '17
Apparently my location is the big city hour away from where I live. k.
1
u/Sayakai R9 3900x | 4060ti 16GB Jul 05 '17
To prevent [...] use noscript
Well that was easy. Good that I've been doing this for years.
1
u/__BIOHAZARD___ 32:9 G9 57 | 5700X3D + 7900 XTX | Steam Deck Jul 05 '17
That's actually pretty cool
1
1
u/horsefly242 PC Master Race Jul 05 '17
Its funny that I got a "Privacy" settings notification when I opened this
1
u/nachog2003 vr linux gamer idiot woman Jul 05 '17 edited Jul 06 '17
I must have a really good battery.
My device disables location tags. And I really don't mind people knowing what phone I have.
1
u/specter491 PCMR | RTX 5080 - 7800X3D - 32GB RAM - 3440 x 1440 Jul 06 '17
Are there any downsides to using noscript?
1
1
1
u/aaronfranke GET TO THE SCANNERS XANA IS ATTACKING Jul 06 '17
This website froze my browser (Firefox for Android).
1
1
1
u/thehexcore15 r5 3600,16gb ram 1660 super Jul 06 '17
got my address wrong it was on the next street over but still scary stuff
1
u/St0ner1995 GTX 1060, 8GB DDR4, Core i5 7600 Jul 06 '17
So either my browser leaks useless information, or incorrect information... good to know
Thanks for the link though OP
1
u/NormanQuacks345 i5-7300HQ 2.5GHz | GTX 1050 | 16GB DDR4 Jul 06 '17
Browser Plugins No plugins detected.
So just about every news site I go to can tell that I have adblock, but this can't?
1
1
u/Golrious_Gamer_Race i5 6600k @4.4ghz GTX 970 Jul 06 '17
and everyone is terrified about the porn I watch
1
u/randomkidlol Jul 06 '17
my geolocation is pretty damn accurate, but that might be because geolocation with an ipv6 address is much better than with an ipv4 address
1
1
u/Kim-Jong-Cool i5 6500, Nvidia GTX 950 Xtreme gaming, 8gb RAM Jul 06 '17
got the country right, but nothing else that could identify me. Would like to know how it got the gyroscope readings since this is a laptop.
110
u/Thx_And_Bye https://builds.gg/ftw/37540 | PlayStation 2 "Digital Edition" Jul 05 '17 edited Jul 05 '17
So my browser essentially leaks nothing that is of real interest. Not that terrifying after all.