Slashdot Mirror


Browser History Sniffing Is Back

An anonymous reader writes "Remember CSS history sniffing? The leak is plugged in all major browsers today, but there is some bad news: in a post to the Full Disclosure mailing list, security researchers have showcased a brand new tool to quickly extract your history by probing the cache, instead. The theory isn't new, but a convincing implementation is."

5 of 161 comments (clear)

  1. Re:Unreliable by Anonymous Coward · · Score: 2, Funny

    This tool seems unreliable (at least in Chrome). I've been on YouTube five times in the past 48 hours and it still showed up grey on the sniffer.

    Most likely an OS/Vendor issue.

    If you're using a Mac, pretty much every sniffer tool will show up ghey.

  2. Re:jacked or tracked: it's your choice by icebraining · · Score: 2, Funny

    'Multiple exclamation marks,' he went on, shaking his head, 'are a sure sign of a diseased mind.'

  3. Re:Unreliable by PopeRatzo · · Score: 3, Funny

    Home Depot is where it's at, especially for cheap Mexicans!

    That's great news. The Mexicans at Lowe's are really overpriced.

    --
    You are welcome on my lawn.
  4. Better have good gag reflexes by axlr8or · · Score: 5, Funny

    Cuz if they wanna sniff my browser history they are in for a surprise.

  5. Re:Easy work-around by Anonymous Coward · · Score: 3, Funny

    If I want to find something again, it's faster to just Google it. Or if I find something that I really don't want to lose, I just bookmark it. No reason to keep a history.

    If your ultimate purpose was more privacy, I find it VERY amusing that you ended up willingly sharing everything with Google, of all parties. :D