<story><title>Building the most inaccessible site with a perfect Lighthouse score (2019)</title><url>https://www.matuzo.at/blog/building-the-most-inaccessible-site-possible-with-a-perfect-lighthouse-score/</url></story><parent_chain><item><author>joan_kode</author><text>Wow, CSS system color keywords seem like a massive privacy leak. I just tested setting the property:&lt;p&gt;&lt;pre&gt;&lt;code&gt;  background: Background;
&lt;/code&gt;&lt;/pre&gt;
on an element, and then changing my Windows desktop background. The element immediately changes color to match my desktop. Then if I call getComputedStyle on the element, I get my desktop background color in javascript. This is in Firefox private mode, and apparently every website can read all my system colors. Why in the world is this enabled by default?&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.w3.org&amp;#x2F;wiki&amp;#x2F;CSS&amp;#x2F;Properties&amp;#x2F;color&amp;#x2F;keywords#System_Colors&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.w3.org&amp;#x2F;wiki&amp;#x2F;CSS&amp;#x2F;Properties&amp;#x2F;color&amp;#x2F;keywords#System...&lt;/a&gt;</text></item></parent_chain><comment><author>dharmab</author><text>It&amp;#x27;s already trivially easy to fingerprint a user in about a dozen other ways via:&lt;p&gt;User Agent String (being fixed soon by the Chrome team)&lt;p&gt;HTTP_ACCEPT headers&lt;p&gt;Browser plugin metadata&lt;p&gt;Time zone&lt;p&gt;System fonts&lt;p&gt;Supercookies&lt;p&gt;Canvas and WebGL fingerprinting&lt;p&gt;AudioContext&lt;p&gt;Device CPU and memory&lt;p&gt;What&amp;#x27;s one more bit of information?</text></comment>
<story><title>Building the most inaccessible site with a perfect Lighthouse score (2019)</title><url>https://www.matuzo.at/blog/building-the-most-inaccessible-site-possible-with-a-perfect-lighthouse-score/</url></story><parent_chain><item><author>joan_kode</author><text>Wow, CSS system color keywords seem like a massive privacy leak. I just tested setting the property:&lt;p&gt;&lt;pre&gt;&lt;code&gt;  background: Background;
&lt;/code&gt;&lt;/pre&gt;
on an element, and then changing my Windows desktop background. The element immediately changes color to match my desktop. Then if I call getComputedStyle on the element, I get my desktop background color in javascript. This is in Firefox private mode, and apparently every website can read all my system colors. Why in the world is this enabled by default?&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.w3.org&amp;#x2F;wiki&amp;#x2F;CSS&amp;#x2F;Properties&amp;#x2F;color&amp;#x2F;keywords#System_Colors&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.w3.org&amp;#x2F;wiki&amp;#x2F;CSS&amp;#x2F;Properties&amp;#x2F;color&amp;#x2F;keywords#System...&lt;/a&gt;</text></item></parent_chain><comment><author>traverseda</author><text>Huh, neat. If anyone else is curious I threw all the color codes on my site here: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;traverseda.github.io&amp;#x2F;code&amp;#x2F;cssColourTest.md.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;traverseda.github.io&amp;#x2F;code&amp;#x2F;cssColourTest.md.html&lt;/a&gt;</text></comment>