Remix.run Logo
hyperhello 4 hours ago

Well, it’s right there in the headline that the website wipes itself from history, so I don’t need any realignment of my ability to discern what I’ve read from what I’ve imagined. If all the site is doing is renaming itself New Tab then that sure isn’t newsworthy. Maybe a domestic violence reporting site should just name itself something innocuous in general without the quick escape? But nonetheless, a web site replacing its own history entry with something from another domain sure doesn’t sound secure.

xdkaplan 4 hours ago | parent | next [-]

Not to start an argument but in lamence terms, renaming history to "New Tab" is as close to wiping history as a website can manage. Concealing, obfuscating, hiding might have been better words but the non technucal audience would not see an issue with the language. Nuance is important, though and i agree its slightly misleading

hyperhello 3 hours ago | parent | next [-]

I just tested it on both iPhone and Android and it does indeed remove itself from history and replaces with a link to a weather domain. That’s incredible that it is allowed and I can trivially think of a way to get someone to get to a fake banking site right now, or for that matter, fill the history with a series of visits to domestic violence sites or even worse!

jerbearito 3 hours ago | parent [-]

https://developer.mozilla.org/en-US/docs/Web/API/Location/re...

This is known and commonly used -- since 1996. What's the risk? You can't change records about other domains.

hyperhello 3 hours ago | parent [-]

I knew about history.replace but I had no idea you could cross sites. Suppose a site, for example, leaves a trail of Amazon Shopping, and curious, you go to it to recall what you did, but it’s Amaz0n instead.

post-it 3 hours ago | parent [-]

Well there's no need to suppose. While I think if it hasn't been exploited in 30 years, there probably isn't an attack surface, you can always demonstrate and report an exploit.

3 hours ago | parent [-]
[deleted]
100721 3 hours ago | parent | prev [-]

What does “lamence” mean?

caymanjim 3 hours ago | parent | next [-]

It's an eggcorn for "layman's".

3 hours ago | parent | prev [-]
[deleted]
3 hours ago | parent | prev | next [-]
[deleted]
3 hours ago | parent | prev | next [-]
[deleted]
3 hours ago | parent | prev | next [-]
[deleted]
jerbearito 3 hours ago | parent | prev [-]

"so I don’t need any realignment of my ability to discern what I’ve read from what I’ve imagined"

Not what I asked but I'm glad you're doing okay! I share your concerns.