News for hackers. Stuff that matters.
Re:Compression Dictionary Transport by dexterdog on Sunday September 15, 2024 @03:26PM (#41549660)
How would you know the original site if it's a common asset?
Re:Compression Dictionary Transport by josephg on Sunday September 15, 2024 @03:51PM (#41549830)
No need. Just make a custom asset referenced only by those sites, and get the browser to cache it.
Re:Compression Dictionary Transport by patrickmeenan on Monday September 16, 2024 @09:24AM (#41555812)
There is some level of data exposure even if you can't tell which site, specifically, a user has visited. You can tell that "this user has been to at least one page that used X".

Depending on what the common resource is, most people wouldn't necessarily care but there may be some cases where they would.

If I can tell that you used facebook login at one point, even though it is used by a good chunk of the web, I could tailor a phish targeted at FB credentials for example.