Click (2016)
andrewzeno
259 points
64 comments
May 18, 2026
Related Discussions
Found 5 related stories in 88.4ms across 8,303 title embeddings via pgvector HNSW
- A 0-click exploit chain for the Pixel 10 happyhardcore · 353 pts · May 15, 2026 · 45% similar
- Cursor 3 adamfeldman · 356 pts · April 02, 2026 · 43% similar
- What Now (and What's Next) bearsyankees · 11 pts · April 13, 2026 · 42% similar
- Diamonds Suck (2006) downbad_ · 15 pts · May 05, 2026 · 42% similar
- Stop Flock cdrnsf · 544 pts · April 14, 2026 · 41% similar
Discussion Highlights (19 comments)
jamiek88
Hmmm. Clever and a little spooky!
maxverse
I enjoyed playing with this. Wild how much it knows.
hspeiser
thats pretty creepy. I find it unnerving that they know exactly where my cursor is.
preinheimer
Heads up: there's audio. It does add something.
claysmithr
kind of weirded me out lol...
busymom0
I am not sure what I am looking at. It's telling me things which I expect any website to know via basic javascript. What am I missing?
10000truths
I'm getting a PR_END_OF_FILE_ERROR when I try to open the page in Firefox on Linux.
ProAm
This is a great POC about how you give up privacy just using the web. This data is bought and sold and more and used against you every day
BudaDude
Nice! It shouted "Bot" when I ran this in the console for (let i = 0; i < 1000; i++) { document.querySelector(".button")?.click(); }
d4rkp4ttern
Another one like this - https://sinceyouarrived.world/taken
foxfired
I've always added analytics scripts on websites I worked on. It was second nature for me. Then when I got my own start up, I didn't just add regular analytics but one that tracks mouse movements so you can watch sessions back like a video [0]. I told a friend about my start up and she jumped on it immediately. I opened the tool and watched her interaction. Then I told her "oh so you opened the dev tools" She immediately ended the session. "How did you know? That's creepy". It was the first time I've actually felt like these tools invade privacy. Yeah, we include it in our terms and condition and privacy page, but I don't think users truly grasp how those tools work. I understand that all analytics tools provide this feature now, but its always creepy to know someone can watch what you are doing. [0]: https://idiallo.com/blog/spying-on-your-user
CSMastermind
This brings me back to the glory days of StumbleUpon. Highly recommend.
briandw
Very fun, I enjoyed seeing what it would react to.
herpdyderp
Looks like it got HN’d to death
mrkn1
I made something very similar 2 weeks ago, re the upcoming OpenAI phone. https://news.ycombinator.com/item?id=48040327
grumpymuppet
As a semi-savvy programmer, but with little experience in web-dev, I'm actually a bit ignorant of what a site can measure -- client side -- versus collect server side. Presumably it's a simple matter to send something back to a server, but I've really never thought about the mechanisms involved.
Barbing
Awesome. Looking for this as an iOS app, since I learned dismissing notifications phones home. (Useful feature for multidevice cloud services but can be creepy, companies learning the notifications we expand or leftswipe away… learning our sleep schedules and preferences and all that in ways we might not have specifically expected in this exact case) Apps know when we’re on WiFi, when we force quit, have potential to have motion sensor access if opting in… Not sure the presentation needed for acceptance into the App Store. As a security checkup tool or something…
Sophira
I'm guessing this is supposed to illustrate how tracking is ubiquitous, given what I see in the source code. In my case, though, after carefully enabling only scripts from the site and the Cloudflare CDN, but not enabling XHR/websockets back to the source page, or any cookies, the only thing that happens for me is: 1. I see a button and an exhortation to click the button. 2. I click the button. 3. The site goes "Subject has clicked the button." 4. The site goes "...". ...and then nothing else happens, no matter where I click or move my mouse. In the background I can see attempted websocket connections, but I'm blocking those so they can't happen. If the aim of the game is to open people's eyes to the dangers of online tracking, it feels like there should be a reward mechanism if such tracking is blocked!
dang
Related. Others? Click (2016) - https://news.ycombinator.com/item?id=35841679 - May 2023 (35 comments) Click - https://news.ycombinator.com/item?id=26518290 - March 2021 (243 comments) Click click click - A browser-based game on online profiling. - https://news.ycombinator.com/item?id=18636038 - Dec 2018 (1 comment) A demonstration of browser events used to monitor online behaviour - https://news.ycombinator.com/item?id=12985644 - Nov 2016 (165 comments)