Security warning for CSS HACK

[anon]

Does it state when you sign up that they are permitted to violate your right to privacy .

I don't remember, heh.

[dvdasacd]

I've tried to apply the css stylesheet hack in firefox (as I'd like to at least try and have in-session history if possible) but it doesn't seem to work

any ideas?

Am testing on pages like http://ha.ckers.org/weird/CSS-history.cgi and even just random other websites where the vistied links won't top changing color/style :S.

[anon]

On Firefox you need to create a file with this content:

a:visited{ 
  background: none !important; 
  background-image: none !important; 
  list-style-image: none !important; 
} 

And put it inside this folder:

%appdata%\Mozilla\Firefox\Profiles\xxxxxxxx.default\chrome

With the name userContent.css. Also, JavaScript must be disabled, or else sites can use the JS-version of the hack that doesn't even need CSS - NoScript would take care of this.

[WakeMeUp]

Haha, this is tricky. And it's in fact a violation of the user privacy...
I wonder why browser developers have not fixed it yet. It's not so difficult: they could either remove this useless preference or render the colors in the way any external agent can spies them.

[anon]

I wonder why browser developers have not fixed it yet.

There's nothing to fix - this hack only exploits a normal feature (link colors) in an unusual way. That isn't useless, after surfing through a lot of links it's easy to forget which ones you've visited or not.

[WakeMeUp]

There's nothing to fix - this hack only exploits a normal feature (link colors) in an unusual way. That isn't useless, after surfing through a lot of links it's easy to forget which ones you've visited or not.

If there's a possible "hack" (which can damage the user privacy), then something to fix there is.
An exploit is when you use a particular feature in an unusual way in order to achieve something other than it was expected.
As I stated before, IMO it's not too difficult creating a different behavior for the browser, though I'm not a browser developer.