DEAR AUSTRALIAN USERS

Our #nationalBroadcaster's website in #Australia, the ABC, fetches images from #Akamai. This means that a USA-based corporation is able to track you as you access #news articles.

Even if you #disableJavascript, the #lazyLoading of images tells Akamai the page being read and how quickly!

- Use #TorBrowser in Safest mode, when accessing any news site,

- When using #ABCNewsAU site #disableImages, on 'about:config' page, set 'default.images' property from '1' to 2 (or 3).

Readers of #investment site, #ZeroHedge may be interested to know its a Goog asset, without specifically expressing itself as such. Its served via G.

Its a #GoOGlE domain and, we assert, #tracker feeding data to G and possibly other #frontRunners, about how ppl are using the oft-celebrated website.

"#UseTor"? They see how far a person scrolls on pages (see #lazyLoading).

While the site lists G in its disclaimer as a source of #news, G is noticeably absent from their #privacyPolicy.

@ares
@Hawk1291
@werwolf
@dosch

Firefox/TorBrowser has tab isolation so its likely not what you think. What is possible and more likely is #AmazonBrave stored your session, and realised you were unhappy with the search, because you searched again and gave you a (better) search result.

If niter is given, that is odd in itself.

Brave is #Amazon and uses #lazyLoading to determine how far you scroll down the results page, which feeds Amazon data.

#braveSearch

@fatboy

@fsf
Thanks FSF,

A passiveAggressive abuse is the #opacityZero that js-requiring sites feature. There might be a way to detect such (when a browser has #javascript disabled) and ask to remove the CSS?

We've also boosted often since January the growing danger around #lazyLoading images.

Though not using JS, it can argueably be used to fingerprint visitors, infer their #readingSpeed and as such #targetUsers with *bespoke* lazy-loaded images like #advertisments at the end of an articles, etc.

Hi @torproject,

Is anyone at Tor Peoject tacking the aforementioned lazy-loading problem.

Do we need to produce a ticket?

See our previous toot hashtagged '#lazyLoading' for more info and suggestions for fixing.

#lazyImg #lazyImage

2/4

We've notice a marked increase in the use of #lazyLoading in the last few months, so TorBrowser and possibly other #webBrowers with #privacyRespecting modes need to think about ways to handle lazyLoading.

OPTIONS:

1) a #noScript-like method: Replace lazyLoadable images with a special image, while stating two options to the used "Enable scroll-triggered 'lazy-loading' of images on this page" and "Load all scrollTriggered content".

2/4

We need to talk about #lazyLoading images in the context of #TorBrowser

WHAT IS LAZY-LOADING

Its when #webdevs use #HTML to tell the browser not to fetch an #image until the user scrolls close to where the image is actually needed.

WHY ITS A PROBLEM FOR PRIVACY

If you load a page at one time in the past but don't scroll, but read the content later the website owner can track this, and therefore, track you.

The website can learn your #reading speed - making #tracking easier.

SOLUTIONS

1/2