Retrieving your browsing history through a CAPTCHA

Re:Retrieving your browsing history through a CAPTCHA by throwawayadvsec on Monday July 31, 2023 @08:36PM (#36950855)

is user input needed or can it be done without it?

[ Parent | on HN ]

Re:Retrieving your browsing history through a CAPTCHA by jesprenj on Monday July 31, 2023 @09:15PM (#36951122)

needed

[ Parent | on HN ]

Re:Retrieving your browsing history through a CAPTCHA by throwawayadvsec on Monday July 31, 2023 @10:14PM (#36951534)

so I just spent the last hour tinkering with it, I think there is definetly room for some timing attack, at least on firefox, there is a pattern

[ Parent | on HN ]

Re:Retrieving your browsing history through a CAPTCHA by varun_ch on Tuesday August 01, 2023 @05:22AM (#36954050)

Here's a timing attack that doesn't need any user interaction: https://ndev.tk/visted/

[ Parent | on HN ]

Re:Retrieving your browsing history through a CAPTCHA by throwawayadvsec on Tuesday August 01, 2023 @05:45AM (#36954168)

awesome thanks!

[ Parent | on HN ]

Re:Retrieving your browsing history through a CAPTCHA by jfk13 on Tuesday August 01, 2023 @10:01AM (#36956055)

Only seems to work in Chrome (not Safari or Firefox).

[ Parent | on HN ]