Scary: Browser Hack lets other see what sites you visit

[anon]

Could you post the css stylesheet?

Here you are:

a:visited{ 
  background: none !important; 
  background-image: none !important; 
  list-style-image: none !important; 
}  

[Cabalo]

Thank you!
How should the file be named and where should it be placed ?

[anon]

For Firefox, the file must be called userContent.css and goes inside this folder:

%appdata%\Mozilla\Firefox\Profiles\xxxxxxxx.default\chrome

Opera users have to follow a slightly different procedure:

Save it [the stylesheet] somewhere (can be any folder; I chose %programfiles%\Opera\styles) as user.css. You must enclose the filename between quotes in Notepad, or else it'll save it as a TXT file.

Open Opera, and go to View -> Style -> Manage Modes.

Click on the Display tab, then "Choose..." your stylesheet. Go to the directory where you located user.css and select it. Now go to the Presentation Modes tab and make sure the "My style sheet" checkbox is ticked for both modes.

Note: if you have set custom preferences for sites in the past, this tweak may not apply for those. You should go to Tools -> Preferences -> Advanced -> Content -> Manage Site Preferences, highlight a site, click on Edit, then go to the Display tab and make sure your stylesheet is being used at the bottom. Repeat this for every site you've set custom preferences for.

[tesco]

Could you post the css stylesheet?

Here you are:

a:visited{
  background: none !important;
  background-image: none !important;
  list-style-image: none !important;
}  

The theory behind this is one the the smartest, yet simplest hacks that I've ever seen.

Some sites want to know if the users visited certain links, and FST is at some of those. It can be used to trace recent trades or even public giveaways. I've discussed this at TC, if you remember.

Right, I thought you were talking about reading the referrer header.

[anon]

The theory behind this is one the the smartest, yet simplest hacks that I've ever seen.

Yes, and it took us a while to find out this is what trackers were using. In the meantime, their staff took advantage of the confusion and would tell they'd have hacked my board and thus got all the IPs they needed to disabled users on IRC...

Now I look back at those times and laugh (Even though I wasn't so amused when I lost my What.cd and BCG accounts)

[0th]

Here you are:

a:visited{ 
  background: none !important; 
  background-image: none !important; 
  list-style-image: none !important; 
}  

i learned about this exploit through http://didyouwatchporn.com/
does the css solution still work? cause i created the usercontent.css and pasted the above code and it still says i visited youporn (i deleted it from history first and then revisited it after creating the .css)

[Tv Controls you]

i learned about this exploit through http://didyouwatchporn.com/
does the css solution still work? cause i created the usercontent.css and pasted the above code and it still says i visited youporn (i deleted it from history first and then revisited it after creating the .css)

If you notice when you click links they will not change in appearance.
Before you added the css script you would have noticed that it differs before and after you clicked the link. This is what the script stops.

If you want your history to not show up on your own computer then go to
Tools > Options... > privacy (tab on the top) > firefox will: never remember history▼
If you don't want to be caught by www.didyouwatchporn.com download http://noscript.net/?ver=1.9.9.77

[0th]

links still change color, i guess thats why didyouwatchporn finds me.
i m attaching my userContent.css to see if i m doing something wrong

http://www.sendspace.com/file/fsndz4

[anon]

does the css solution still work? cause i created the usercontent.css and pasted the above code and it still says i visited youporn

The stylesheet only takes care of the CSS "flavor" of the attack. Your history can be easily checked via JavaScript as well. NoScript should fix that.

[Tv Controls you]

links still change color, i guess thats why didyouwatchporn finds me.
i m attaching my userContent.css to see if i m doing something wrong

http://www.sendspace.com/file/fsndz4

There is no way in hell I'm downloading a file you put up.

Just open it with notepad and past what it contains here.