Timing attack against HSTS to sniff browser history in Chrome and Firefox

Re:Timing attack against HSTS to sniff browser history in Ch... by bcrypt on Monday October 26, 2015 @11:32PM (#10456138)

interesting, are you using any browser addons? please file a bug at https://github.com/diracdeltas/sniffly, thanks

[ Parent | on HN ]

Re:Timing attack against HSTS to sniff browser history in Ch... by markbnj on Tuesday October 27, 2015 @10:33AM (#10458206)

In Chrome I am running ABP, which can't be very uncommon, Evernote web clipper, rest console, xpath helper, and a bunch of Google's own shims. I will file a bug later today if I can repro the results.

[ Parent | on HN ]

Re:Timing attack against HSTS to sniff browser history in Ch... by PepeGomez on Tuesday October 27, 2015 @02:41AM (#10456628)

Same here. Most sites are those that I visited shortly a long time ago.

[ Parent | on HN ]

Re:Timing attack against HSTS to sniff browser history in Ch... by cm2187 on Tuesday October 27, 2015 @03:26AM (#10456703)

Same here. The only addon I use is uBlock origin. I also had to activate javascript on the page which I normally don't.

[ Parent | on HN ]