News for hackers. Stuff that matters.
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by valve1 on Thursday May 13, 2021 @05:29PM (#27147706)
On Tor we show a fake captcha on the demo, which allows to collect multiple key presses and use each as a user-provided trigger.
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by Ansil849 on Thursday May 13, 2021 @05:41PM (#27147839)
This is a really clever way to coerce interactivity!
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by nulbyte on Thursday May 13, 2021 @07:52PM (#27148975)
Clever indeed; I only suspected this the second go-round, after I noticed the reload button flicker as I typed. I also noticed you don't have to press Enter or even type the correct phrase to get past the fake prompt. In hindsight, the easy to guess text should have been a dead give-away, but it wasn't.
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by johnvaluk on Thursday May 13, 2021 @05:53PM (#27147965)
Does that bypass any alerts that would be presented to the user by the browser?