Of all the stupid things a browser lets you do, this is ridiculous. Are we talking about tracking cookies, or can a website literally just request the browsing history from a crappy browser? I understand that embedded code, say from an advertising server, could access a cookie from numerous pages and build its own history, but the websites would have to include this code themselves. How does Site A access the fact that I've visited Site B if they don't share this same code/cookie?