Google ads now allow fingerprinting, QGIS bans AI code, and Gran Turismo 4 in WebAssembly

1 hour ago

How a website recognises your browser from its hardware after you clear cookies, now that Google's ad products allow device fingerprinting, and what Brave, Tor and Mullvad Browser do about it. Also from Monday's Hacker News front page: QGIS bans AI-assisted code, PS2 Web Recomp runs Gran Turismo 4 in a browser, and Pensieve gives coding agents a local index. Fingerprints are the new cookies https://royfish.dev/fingerprints-are-the-new-cookies Discussion: https://news.ycombinator.com/item?id=50048642 legitster on how commercial fingerprinting leans on the IP address: https://news.ycombinator.com/item?id=50051253 QGIS enacts moratorium on AI contributions https://github.com/qgis/QGIS-Enhancement-Proposals/pull/387 Discussion: https://news.ycombinator.com/item?id=50054751 robertclaus on the same problem at Plotly: https://news.ycombinator.com/item?id=50056839 Show HN: PS2 games statically recompiled to WebAssembly https://github.com/snuri00/ps2-web-recomp Discussion: https://news.ycombinator.com/item?id=50052251 krystalgamer on the part that is still emulated: https://news.ycombinator.com/item?id=50054504 Pensieve: local indexing to reduce tool calling and token usage https://tedhaley.ca/pensieve/ Discussion: https://news.ycombinator.com/item?id=50049508 tinthedev on codebase hygiene: https://news.ycombinator.com/item?id=50053446 pcthrowaway on the install prompt: https://news.ycombinator.com/item?id=50052352 The front page that day: https://news.ycombinator.com/front?day=2026-10-12

Ask

Ask about this presentation

Answers are generated from this presentation.

Chapters

  1. 0:00Google ads now allow fingerprinting
  2. 0:25What a fingerprint is made of
  3. 0:56Brave, Tor and Mullvad Browser
  4. 1:27QGIS bans AI-assisted code
  5. 2:07PS2 Web Recomp
  6. 2:42Pensieve
Show transcript

Google ads now allow fingerprinting

Y logo

Google ads now allow fingerprinting, QGIS bans AI code, and Gran Turismo 4 in WebAssembly

On Monday's Hacker News front page, a demo shows how a website recognises your browser after you clear its cookies, reload, or switch on a VPN. The page names each visitor after their hardware, and the name sticks. Google's ad products have allowed device fingerprinting since February 2025, reversing the stance Google took against it in 2019.

What a fingerprint is made of

Your GPU, your fonts and your time zone add up to a name

canvas text WebGL triangle OfflineAudioContext Intl time zone CPU cores
latest Chrome · French · Apple M4 · + hardware readings → practically unique

Each of these readings runs without a permission prompt. The page draws text and a triangle off screen and reads the pixels back, renders a tone it never plays, and asks for your time zone and your number of CPU cores. Millions of browsers run the latest Chrome, and millions of Macs have an M4. The latest Chrome, set to French, on an M4, is a much smaller crowd, and the hardware readings shrink it to practically one person. A VPN changes your address, but your time zone stays put.

Brave, Tor and Mullvad Browser

Brave adds noise, and Tor and Mullvad Browser make everyone look alike

Brave
random noise in each reading
Tor, Mullvad Browser
every user reports the same values
Privacy extensions
so rare they make you easier to spot

“90% of commercial fingerprinting services still rely mostly on the IP address.”

legitster

Chrome and Edge keep one site out of another's data, and stop there. Brave feeds a little random noise into each reading, so your fingerprint keeps changing. Tor and Mullvad Browser make every user report the same values. A privacy extension works against you, because so few people run one that it makes you rarer. In the thread, legitster argues commercial trackers still lean mostly on your IP address, because readings like fonts and software versions drift within days.

QGIS bans AI-assisted code

QGIS stops accepting code written with AI tools

“No LLM, AI or agent assisted code contributions are allowed”

QGIS AI tool use policy, version 2.0
Until October 7
any tool, with a human in the loop
Now
AI code found later gets reverted

QGIS, the open-source desktop map and GIS app, now refuses any code written with an LLM, an AI tool or an agent in its main repository. The old rule allowed any tool, as long as a human reviewed the work. That rule didn't hold up, and the project lost at least one valued contributor. Nyall Dawson describes the new one as shutting the door first, then deciding how far to open it. In the thread, robertclaus describes the same flood at Plotly: unproofread issues and plausible but weak pull requests.

PS2 Web Recomp

PS2 Web Recomp runs Gran Turismo 4 at full speed in Chrome

PS2 machine code → C++ → WebAssembly · drawn with WebGPU
Gran Turismo 4
50 fps, full PAL speed, at 2× resolution
God of War II
60 fps in heavy combat

“another recomp that still emulates a core system component”

krystalgamer

PS2 Web Recomp translates a PlayStation 2 game's machine code into C++ ahead of time, compiles it to WebAssembly, and draws with WebGPU. Gran Turismo 4 runs at full speed in Chrome on a laptop's integrated graphics, at twice the console's resolution. You bring a disc you own, and one script turns it into a web page. In the thread, krystalgamer points out that part of the console is still emulated. That's right: the I/O processor runs the game's own sound and disc modules on an interpreter.

Pensieve

Pensieve gives Claude Code and Codex a local index to search before they grep

code documents past agent sessions MCP · on-device embeddings
tool calls per lookup, 144 runs
Pensieve
2.0
grep
3.4

Pensieve is a free, open-source Mac app that indexes your code, your documents and your past agent sessions on your own machine. Claude Code, Codex and Cursor query it over MCP, by meaning or by the exact words, and get back a few passages with file and line. Agents find what they need in about two tool calls instead of three or four, and often in one. In the thread, tinthedev argues a well-organised codebase is the better fix, and others point out the install asks your agent to pipe a script into the shell.