Alibi check

Checking every source…

What each part of a page can read

These rows read the time zone from macOSyour operating system itself, which still knows where you are. Whereabouts moves your Mac to your VPN’s time zone while it’s connected and keeps your real time in the menu bar, so these rows match too. Set your computer’s time zone to your VPN’s and these rows follow it. On Windows they can still name another city with the same offset, since one Windows zone covers several.

Location

Not asked yet. Your browser will ask for permission first.

Other signals

How to test

1. Change a setting in Alibi, then reload this page (or press Reload to apply in the popup).
2. Try the hardest case, HTML that arrives instantly: ?delay=0. Then a normal network delay: ?delay=150.
3. Give this site its own cover in the popup. The iframes should follow this page, not their own address.
4. Stealth: the two workers started from this site’s own files show your real zone; third-party scripts can only start blob workers, which match. With “Allow User Scripts” off, the iframes and first inline script can show it too. Deep: every row should match.
5. Open the same page on the other site to swap which address is the cross-site one.
6. The cross-site iframe, instant-HTML and strict-policy cases need a second site and a server that can delay its answer. Run the local copy for those: yarn testpage.