Browsers & browsing history: released 4 0day

Browsers & browsing history: A team of researchers from Stanford and San Diego Universities have published a survey for Browser history re: visited.

The researchers, with their study, reveal to the public four new and functional attacks through browsers' browsing history.
Browsers

Leak attacks affect all modern browsers that do not prevent your browsing history from being saved. In short, Firefox, Chrome, Internet Explorer and Microsoft Edge are vulnerable applications while Tor Browser is not.

Most web browsers log the websites they visit by default. It is a feature that for convenience from the browser. When users type in the address bar, browsers remember the exact address and even recommend it in an autofill mode.

Let's look at the attacks on your browsing history

The first that the researchers discovered uses the CSS Paint API to determine whether a particular URL was visited by the user.

The second attack uses 3D CSS transformations, a technique released with CSS 3. An attacker collects 3D CSS and transforms them into other CSS to create login information.

The third attack uses SVG and the CSS fill rule. The attack uses an SVG image inside a link element and a “string of CSS padding rules”.

The fourth and final attack uses the temporary Chrome bytecode to determine if a JavaScript source file was previously loaded in the browser.

All four attacks have one audience: they must specify the URLs to control them. None of them can retrieve a user's entire browsing history.

How effective are these attacks? Researchers say one of these attacks can determine the 6000 address status per second.

Researchers have reported vulnerabilities to browser developers, but it will take months to get the necessary fixes.

____________________

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.087 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).