~/talk

The Most Annoying Website (Aka "the Power of the Web Platform")

Talkat JSConf US 2018 · on Tuesday, 2018-08-21· [web-platform, security]
slides:none on file

A live demo builds an "annoying site" that actually opens and fights with dozens of popups, autoplays unmuted speech, copies ASCII art to the clipboard, fills downloads, vibrates phones, flashes cameras and hijacks history using real browser APIs. It wires together window.moveTo, speechSynthesis, beforeunload plus picture‑in‑picture, clipboard, vibration, getUserMedia torch, pushState and the window.opener window‑redirect quirk. Browsers visibly freeze; quitting is the usual escape. The author reports sending it to a spammer and never hearing from that sender again.

AI-written summary · about

  1. 0:00Start
  2. 12:23INTERCEPT ALL USER-INITIATED EVENTS
  3. 13:03OPEN CHILD WINDOW
  4. 13:50BOUNCE WINDOW OFF THE SCREEN EDGES
  5. 14:02PLAY RANDOM VIDEO IN THE WINDOW
  6. 15:07PERMISSION MODEL
  7. 15:49COPY SPAM TO CLIPBOARD
  8. 16:25SPEAK TO THE USER
  9. 18:03REGISTER PROTOCOL HANDLERS
  10. 18:33REQUEST CAMERA AND MIC
  11. 19:02START VIBRATE INTERVAL
  12. 19:54START SAFARI PICTURE-IN-PICTURE
  13. 20:34HIDE THE CURSOR
  14. 22:22SHOW A MODAL TO PREVENT WINDOW CLOSE
  15. 23:25FULLSCREEN THE BROWSER
  16. 23:39LOG THE USER OUT OF POPULAR SITES (PART 1)
  17. 24:29DISABLE THE BACK BUTTON
  18. 25:03FILL THE HISTORY WITH EXTRA ENTRIES
  19. 25:26DO EMBARRASSING SEARCHES (PART 2)
  20. 26:52TAKEOVER OPENER WINDOW (PART 1)
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.