TriLinder
6
20
TriLinder

@lemmy.ml

TriLinder 177 points 3 years ago

This is possible because Lemmy doesn't proxy external images but instead loads them directly. While not all that bad, this could be used for Spy pixels by nefarious posters and commenters.

Note, that the only thing that I willingly log is the "hit count" visible in the image, and I have no intention to misuse the data.

path: 0 2307130, hotness: undefined, score: 177, children: 24
TriLinder 120 points 3 years ago

This is possible because Lemmy doesn't proxy external images but instead loads them directly. While not all that bad, this could be used for Spy pixels by nefarious posters and commenters.

Note, that the only thing that I willingly log is the "hit count" visible in the image, and I have no intention to misuse the data.

path: 0 2307121, hotness: undefined, score: 120, children: 14
TriLinder 50 points 3 years ago

This is possible because Lemmy doesn't proxy external images but instead loads them directly. While not all that bad, this could be used for Spy pixels by nefarious posters and commenters.

Note, that the only thing that I willingly log is the "hit count" visible in the image, and I have no intention to misuse the data.

path: 0 2307126, hotness: undefined, score: 50, children: 0
TriLinder 45 points 3 years ago

path: 0 5958602 5976820, hotness: undefined, score: 45, children: 0
TriLinder 29 points 3 years ago

This is possible because Lemmy doesn't proxy external images but instead loads them directly. While not all that bad, this could be used for Spy pixels by nefarious posters and commenters.

Note, that the only thing that I willingly log is the "hit count" visible in the image, and I have no intention to misuse the data.

path: 0 2307114, hotness: undefined, score: 29, children: 2
TriLinder 20 points 3 years ago

It appears to have worked

path: 0 57410, hotness: undefined, score: 20, children: 0
TriLinder 7 points 3 years ago

The user-agent detection definitely isn't great, this was just meant as a quick proof of concept for anyone curios.

path: 0 2317935 2320731 2325939, hotness: undefined, score: 7, children: 1
TriLinder 4 points 3 years ago

A picture in a comment?

path: 0 63747, hotness: undefined, score: 4, children: 0
TriLinder 4 points 3 years ago

You could also send the image through a DM if you want to find a particular user

path: 0 2307130 2309876 2316136 2326015, hotness: undefined, score: 4, children: 1
TriLinder 3 points 3 years ago

I've also started working on my own Lemmy app (in NativeScript). Maybe we should all create a community to share insights.

path: 0 85709, hotness: undefined, score: 3, children: 1
TriLinder 3 points 3 years ago

The user-agent detection definitely isn’t great. If it doesn't recognize a client, it just says unknown. But that wasn't the main point of the post anyway, this was just meant as a quick proof of concept for anyone curious.

path: 0 2318033 2325978, hotness: undefined, score: 3, children: 1
TriLinder 3 points 3 years ago

Thought about adding the user's location, but was worried PythonAnywhere could somehow cache the image between multiple people. A great demo though!

path: 0 2314380 2325891, hotness: undefined, score: 3, children: 0
TriLinder 2 points 3 years ago

It's just a simple Flask server. I parse the user-agent using the user_agents Python library, apply some conditionals upon the result, render the image using Pillow and send it to the user.

path: 0 2307130 2319189 2326444, hotness: undefined, score: 2, children: 0
TriLinder 2 points 3 years ago

That's weird. The extension should definitely work with the image, as that's what I used when building this quick demo. Does the content of a site like this update?

path: 0 2307735 2307898 2309206 2326147, hotness: undefined, score: 2, children: 0
TriLinder 2 points 3 years ago

Thought about adding the user's location, but was worried PythonAnywhere could somehow cache the image between multiple people.

path: 0 2309059 2326090, hotness: undefined, score: 2, children: 0
TriLinder 2 points 3 years ago

It does

path: 0 2307114 2314717 2326230, hotness: undefined, score: 2, children: 0
TriLinder 1 point 3 years ago

Yeah, I just use whatever the user_agents Python library gives me as user_agent.os.family.

path: 0 2313069 2316059 2317486 2326072, hotness: undefined, score: 1, children: 0
TriLinder 1 point 3 years ago

If you wanted to target a specific user, you could always send a DM with the image

path: 0 2308603 2320924 2326255, hotness: undefined, score: 1, children: 1
TriLinder 1 point 3 years ago

Oh, how did I not notice that before? Now should be fixed.

path: 0 2318033 2319749 2329239, hotness: undefined, score: 1, children: 1
TriLinder 1 point 3 years ago path: 0 2308603 2309679 2314675 2326320, hotness: undefined, score: 1, children: 0

thanks for using Leebra!

go to feed...