News for hackers. Stuff that matters.

A comment on Timing attack against HSTS to sniff browser history in Chrome and Firefox.

Re:Timing attack against HSTS to sniff browser history in Ch... by markbnj on Monday October 26, 2015 @10:30PM (#10455907)
I hit the page from Chrome 45.0.2454.101 and it literally did not get a single site that I regularly visit. It did make a hit on Reddit, I guess, but I have only visited the site two or three times, and you could probably say that about 2/3 of the population.
[ Parent | on HN ]
Re:Timing attack against HSTS to sniff browser history in Ch... by bcrypt on Monday October 26, 2015 @11:32PM (#10456138)
interesting, are you using any browser addons? please file a bug at https://github.com/diracdeltas/sniffly, thanks
[ Parent | on HN ]
Re:Timing attack against HSTS to sniff browser history in Ch... by markbnj on Tuesday October 27, 2015 @10:33AM (#10458206)
In Chrome I am running ABP, which can't be very uncommon, Evernote web clipper, rest console, xpath helper, and a bunch of Google's own shims. I will file a bug later today if I can repro the results.
[ Parent | on HN ]
Re:Timing attack against HSTS to sniff browser history in Ch... by PepeGomez on Tuesday October 27, 2015 @02:41AM (#10456628)
Same here. Most sites are those that I visited shortly a long time ago.
[ Parent | on HN ]
Re:Timing attack against HSTS to sniff browser history in Ch... by cm2187 on Tuesday October 27, 2015 @03:26AM (#10456703)
Same here. The only addon I use is uBlock origin. I also had to activate javascript on the page which I normally don't.
[ Parent | on HN ]
Re:Timing attack against HSTS to sniff browser history in Ch... by scrollaway on Tuesday October 27, 2015 @12:14AM (#10456286)
Same on Firefox 41.0.2. It got 1 or 2 correct hits; a lot of correct ones in "sites you probably haven't visited" but then again that's not the hard part?
[ Parent | on HN ]
Re:Timing attack against HSTS to sniff browser history in Ch... by rplnt on Tuesday October 27, 2015 @03:58AM (#10456764)
> you could probably say that about 2/3 of the population

Hardly.

[ Parent | on HN ]