News for hackers. Stuff that matters.
Re:What the Internet knows about you by geuis on Wednesday September 02, 2009 @04:09PM (#801007)
Unfortunately, this is just really old news and really lame. Man, I hate using the word lame. Its not an "attack". Its simply taking advantage of a feature built into all browsers since like 2000 or before.
Re:What the Internet knows about you by mildweed on Wednesday September 02, 2009 @06:27PM (#801263)
Re:What the Internet knows about you by marchewa on Wednesday September 02, 2009 @07:41PM (#801387)
That's true -- there have been several projects making use of the CSS :visited history sniffing technique. The method itself was originally reported in early 2000. See http://whattheinternetknowsaboutyou.com/docs/details.html#re...
Re:What the Internet knows about you by dfranke on Wednesday September 02, 2009 @04:52PM (#801090)
It's old and it's somewhat lame, but it is an attack. CSS and the DOM were designed not to allow this sort of information leak. They missed a spot.
Re:What the Internet knows about you by ubernostrum on Wednesday September 02, 2009 @09:46PM (#801573)
The problem, of course, is how to solve this without neutering both CSS and the DOM in the process.
Re:What the Internet knows about you by taitems on Thursday September 03, 2009 @01:26AM (#801849)
Maybe :visited should not apply to cross domain links.
Re:What the Internet knows about you by timf on Wednesday September 02, 2009 @04:25PM (#801029)
It is old news, but CSS history 'browsing' can be used as an attack to find authz tokens in certain URLs.
Re:What the Internet knows about you by TheElder on Wednesday September 02, 2009 @08:59PM (#801513)
It's