this post was submitted on 29 Jan 2024
94 points (99.0% liked)

the_dunk_tank

15897 readers
1 users here now

It's the dunk tank.

This is where you come to post big-brained hot takes by chuds, libs, or even fellow leftists, and tear them to itty-bitty pieces with precision dunkstrikes.

Rule 1: All posts must include links to the subject matter, and no identifying information should be redacted.

Rule 2: If your source is a reactionary website, please use archive.is instead of linking directly.

Rule 3: No sectarianism.

Rule 4: TERF/SWERFs Not Welcome

Rule 5: No ableism of any kind (that includes stuff like libt*rd)

Rule 6: Do not post fellow hexbears.

Rule 7: Do not individually target other instances' admins or moderators.

Rule 8: The subject of a post cannot be low hanging fruit, that is comments/posts made by a private person that have low amount of upvotes/likes/views. Comments/Posts made on other instances that are accessible from hexbear are an exception to this. Posts that do not meet this requirement can be posted to !shitreactionariessay@lemmygrad.ml

Rule 9: if you post ironic rage bait im going to make a personal visit to your house to make sure you never make this mistake again

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] combat_brandonism@hexbear.net 13 points 2 years ago (1 children)

Yeah I mean I was around for that. What you quoted is what I'm saying:

They also log and monitor the IPs and the emails used to sign up on their instance

None of that is unique to hexbear. Anyone visiting the URL in the OP will have their IP logged, there's no way to tell if the traffic originates from someone clicking that link here*. And no way for them to link your IP with the fact that you're a hexbear user unless you're naive enough to sign up for a lemmy world account and post correlating info to a hexbear account.

What is unique to hexbear (sort of, I'm sure they hate the grad too) is the vendetta they hold against us, so even though it's probably a PITA to correlate these things you can be confident that they're petty enough to do that.

Fuck lemmy world and good on ya for posting a lemmy.ml link to the federated thread.

* unless your browser's adding headers to note what site you're clicking that link on, which uh stop using chrome I guess shrug-outta-hecks

[–] PaX@hexbear.net 8 points 2 years ago* (last edited 2 years ago) (1 children)

unless your browser's adding headers to note what site you're clicking that link on, which uh stop using chrome I guess

As far as I know, all major browsers (Firefox, Safari, Chrome) at least send the host you came from in the referrer header (like "https://hexbear.net")

desolate

Edit: This is true only if the site you're on doesn't set a different referrer policy! And Lemmy does set a safer referrer policy, see below

[–] combat_brandonism@hexbear.net 5 points 2 years ago (1 children)

Weird, I tested it by clicking the lemmy.ml link and didn't see a referer header in the request headers.

[–] PaX@hexbear.net 4 points 2 years ago* (last edited 2 years ago) (1 children)

You're right! I'm on Firefox and I just figured out how to test it and it seems Lemmy's web UI thing sets the referrer policy to same-origin which means no referrer information is sent when navigating to a different domain.

But my copy of Firefox's default referrer policy is set to strict-origin-when-cross-origin so it would have sent "https://hexbear.net" if the referrer policy was not set.

My bad, I should have checked first to be sure. I would hate to be a web developer lol

[–] combat_brandonism@hexbear.net 4 points 2 years ago

Just a nightmare interaction of various RFCs and their consequences.