Re: Interesting: Stealing your browser history... withoutJavaScript!

[silky <michaelslists () gmail com>]

On 6/14/09, Thomas Raef <traef () ebasedsecurity com> wrote:
> I seem to recall that HD Moore (I believe that's his name) showed this
> at Blackhat 2006 in Las Vegas, but his did use javascript.

Yeah, it's pretty old. a:visited. *shrug*

Could be a ff-plugin (maybe addition to NoScript) to ban certain types
of CSS selectors and attributes.


> Thomas J. Raef
> We Watch Your Website
> "We Watch Your Website - so you don't have to!"

-- 
noon silky
http://lets.coozi.com.au/

"A quote that makes me seem smart, humble, and rationalises my actions."
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.