Twitter Tracking You in Incognito Mode – Using Window.Alert()

https://twitter.com/marknadal/status/1116434458435940352

by marknadal • 7 years ago

11 3 7 years ago

qwertox• 7 years ago

Isn't this a Chrome-specific "Smart-Lock" or "Auto Sign-In" dialog? It shows multiple selectable users in a modal dialog, AFAIK Windows.Alert() is not able to do this.

chrisl99• 7 years ago

That is correct, it is just opening Chrome's password manager:

  await navigator.credentials.get({password:true})

https://developers.google.com/web/fundamentals/security/cred...

I do think it is odd that this API will present the UI without any user interaction first. (Doesn't require a tap/click to open.)

lucasmullens• 7 years ago

As mentioned in the tweet's replies, this isn't true at all. I definitely was a bit shocked to see my username appear in incognito, but this isn't a window.alert. Twitter has no access to your username in incognito.

Twitter Tracking You in Incognito Mode – Using Window.Alert()

Related Stories