We took a hacker to a public WiFi café (2014)

Re:We took a hacker to a public WiFi café (2014) by schoen on Tuesday February 13, 2018 @03:53PM (#16370658)

This has gotten a bit better since then with HSTS (and I didn't understand whether the attacker was doing SSL stripping, but it's also gotten a lot better against a passive attacker with much greater HTTPS adoption). But a significant fraction of these attacks would certainly still reveal sensitive information.

[ Parent | on HN ]

Re:We took a hacker to a public WiFi café (2014) by jandrese on Tuesday February 13, 2018 @04:09PM (#16370794)

Some of the stuff in the article seemed a bit magical. He could tell that someone bookmarked a website?

[ Parent | on HN ]

Re:We took a hacker to a public WiFi café (2014) by doctoboggan on Tuesday February 13, 2018 @04:21PM (#16370901)

He could tell she was browsing https://del.icio.us/ and was able to find her account and see what she "bookmarked" there.

[ Parent | on HN ]

Re:We took a hacker to a public WiFi café (2014) by neil_s on Tuesday February 13, 2018 @04:16PM (#16370847)

He could tell that they submitted the website to Delicious, which would be an HTTP(S?) request, not a bookmark to their own browser.

[ Parent | on HN ]

Re:We took a hacker to a public WiFi café (2014) by TJSomething on Tuesday February 13, 2018 @04:19PM (#16370881)

I'd assume by looking for a favicon request without any other requests.

[ Parent | on HN ]

Re:We took a hacker to a public WiFi café (2014) by samat on Tuesday February 13, 2018 @04:00PM (#16370726)

How so?

[ Parent | on HN ]