Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This doesn't seem to work very well. Want a better scriptless cross-site tracking mechanism? Check out https://xsid2-demo.glitch.me and https://xsid2-demo.easrng.net and note how they both get the same id.


Ok sure, but how does it work? I clicked around your website but there doesn't seem to be a description.


I haven't written a description yet. Here's a diagram I just made (I'm on my phone rn, please forgive any spelling issues) https://owo.whats-th.is/56opvAS.html


Thank you, interesting!


Neither of the above links do much for me.

There was an initial screen, then a redirect to another page containing the text below, and appearing to depend upon JS being enabled.

"Waking up

To keep Glitch fast for everyone, inactive projects go to sleep and wake up on request."

That redirect is different for the two initial URLs, but is of the form:

    https://xsid2.glitch.me/https%3A%2F%2Fxsid2-demo.glitch.me%2Fcb%2FHASH
where HASH is a sequence of hex characters, different for the two original URLs.

I'm using Firefox, with uMatrix having scripts and css disabled by default, but 1st party cookies enabled.


A second try loading each site in new tabs seemed to work, but this time each gave a different ID. One starting 3fa2, the other f918

Reloading each tab then gave two different numbers, 7eb6 and 6f83

Subsequent reloads did not change again.

Loading the sites in to two more tabs, gave yet a different pair of numbers (1934 and 1667), reloads of those tabs yeilded another pair (b308 and 3df8)


Oh huh, I'm seeing this too. It worked at some point, not sure why it isn't now. I'll look into it.

Edit: it looks like this happens when the sites have gone down and are being restarted on load. I'll move them to my VPS, that should fix it.


Ok, it should work more reliably now.


This doesn't work very well.

On the glitch website, I get f9703...

On the easrng website, I get 8ecd6...


Hmm, what browser? I've tested normal Firefox, Chrome, and Bromite and it works on all of them.


I get different results for each domain on Firefox Android.


It works on Fennec, even in private mode. (Fennec is the F-Droid Firefox build.) Do you have any addons? It works with uBlock Origin on desktop, haven't tried mobile.


I'm on a desktop using FF with uBO, both with fairly locked-down configs, and it doesn't work for me. That is, both websites eventually lead to a broken page because of too many redirects, and the URLs in the URL bars of each tab do not contain the same ID.

Without digging too deep into what your websites are doing, I did notice that they're trying to set / read cookies, which is a) being blocked by uMatrix in general, and b) perhaps being blocked by me having configured FF to block third-party cookies in particular.


Oh yeah, it needs 1st party cookies enabled.


Can you try again? I've moved one of the parts off Glitch and onto my VPS which seems to have fixed the issue.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: