A web page that shows you everything the browser told it without asking

This interactive web page demonstrates how browsers automatically expose sensitive user data—including location, device specifications, installed fonts, and login status—to websites without explicit user consent, highlighting a critical security and privacy gap in web standards. For IT leaders, this reveals a fundamental tension between web functionality and user privacy that existing security controls cannot adequately address, as these data exposures occur through standard, documented browser APIs by design. Organizations must reassess their data governance strategies and user privacy protection mechanisms, as traditional defenses (VPNs, cookie blocking, incognito browsing) cannot prevent this passive fingerprinting and identification.

Hacker News3 min read
Read full article
A web page that shows you everything the browser told it without asking
This interactive web page demonstrates how browsers automatically expose sensitive user data—including location, device specifications, installed fonts, and login status—to websites without explicit user consent, highlighting a critical security and privacy gap in web standards. For IT leaders, this reveals a fundamental tension between web functionality and user privacy that existing security controls cannot adequately address, as these data exposures occur through standard, documented browser APIs by design. Organizations must reassess their data governance strategies and user privacy protection mechanisms, as traditional defenses (VPNs, cookie blocking, incognito browsing) cannot prevent this passive fingerprinting and identification.