this post was submitted on 28 Mar 2026
72 points (100.0% liked)

Hacker News

4606 readers
573 users here now

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

founded 2 years ago
MODERATORS
top 3 comments
sorted by: hot top controversial new old
[–] paddythegeek@lemmy.ca 22 points 4 days ago

Wow, excellent breakdown and very thorough. I would not have expected any less from these shitbags - evil wrapped in incompetence.

[–] Maeve@kbin.earth 17 points 4 days ago

Read that carefully. It hides: Cookie banners GDPR consent dialogs OneTrust popups Privacy banners Login walls Signup walls Upsell prompts Paywall elements CMP (Consent Management Platform) boxes It forces body { overflow: auto !important } to re-enable scrolling on pages where consent dialogs lock the scroll. Then it sets up a MutationObserver to continuously nuke any consent elements that get dynamically added. An official United States government app is injecting CSS and JavaScript into third-party websites to strip away their cookie consent dialogs, GDPR banners, login gates, and paywalls. The native side confirms this is the injectedJavaScript prop on the React Native WebView:.. First, the _isShared flag. It's read from SharedPreferences on init and defaults to false. The JavaScript layer can flip it on with setLocationShared(true). The Hermes string table confirms both setLocationShared and isLocationShared are referenced in the app's JS bundle, so the app has the ability to toggle this. Second, the user has to grant the Android runtime location permission. The location permissions aren't declared in the AndroidManifest but requested at runtime. The Google Play Store listing confirms the app asks for "access precise location only in the foreground" and "access approximate location only in the foreground." Third, the start() method only proceeds if the device actually has a location provider (GMS or HMS). If all three gates pass, here's what runs. The fused location API requests GPS at the intervals defined above:..

[–] wrinkle2409@lemmy.cafe 4 points 3 days ago

The fucking anime pfp is the cherry on top