Re:Vulnerability allows cross-browser tracking in Chrome, Fi...
by valve1 on Thursday May 13, 2021 @05:29PM
(#27147706)
On Tor we show a fake captcha on the demo, which allows to collect multiple key presses and use each as a user-provided trigger.
[ Parent
| on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi...
by Ansil849 on Thursday May 13, 2021 @05:41PM
(#27147839)
This is a really clever way to coerce interactivity!
Re:Vulnerability allows cross-browser tracking in Chrome, Fi...
by nulbyte on Thursday May 13, 2021 @07:52PM
(#27148975)
Clever indeed; I only suspected this the second go-round, after I noticed the reload button flicker as I typed. I also noticed you don't have to press Enter or even type the correct phrase to get past the fake prompt. In hindsight, the easy to guess text should have been a dead give-away, but it wasn't.