News for hackers. Stuff that matters.

A comment on Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA. Parent comment

Re:Danish military intelligence uses XKEYSCORE to tap cables... by cookiengineer on Sunday November 01, 2020 @04:31PM (#24962674)
What most people don't understand is that a targeted IP, with a stream size and a timestamp is enough to identify pretty every https page uniquely if it is accessible by a spider.

A headless chrome makes measurements of timings even easier these days. The order of how files are loaded, which file size e.g. jquery.123.min.js has, and where and when exactly in which order it is loaded from is very unique among all pages of a website.

[ Parent | on HN ]
Re:Danish military intelligence uses XKEYSCORE to tap cables... by parliament32 on Monday November 02, 2020 @05:28PM (#24974238)
>stream size and a timestamp

I think that's more complicated than you realize. That list would be impossibly large to scrape and search, not to mention collisions and dynamic content problems.

>The order of how files are loaded

It's a good idea, but you don't know what files I have in my cache and when they expire, or what files my extensions are blocking. This'd only work in an ideal-case scenario.

[ Parent | on HN ]