CSS History Leak and how to prevent it even with enabled history [Firefox & Opera]

**SealLion** · 16.12.09, 01:37

Originally Posted by kurdt

all you need is the firefox extension called SAFE HISTORY. It prevents java based and non-javabased attempts to steal your history.

you can use your method or you can use anyone's else's method. Different strokes for different people, yes??

**atlantis** · 16.12.09, 10:39

is there any other site for searching leak in css ?

**anon** · 16.12.09, 17:35

Does this one work for you?

Code:

http://www.whattheinternetknowsaboutyou.com/

It loads for me, but the layout is destroyed and thus unusable.

**atlantis** · 16.12.09, 18:45

Congratulations, we did not find anything in this category in your browser history.
Feel free to try our other browser history tests.

noscript forever

**anon** · 16.12.09, 18:45

And this was with the Safe History addon? That's good to know.

**atlantis** · 16.12.09, 21:24

without Safe History and with enabled history

**anon** · 16.12.09, 21:25

Just noticed this edit

Originally Posted by atlantis

noscript forever

I assume you're the anti-leak stylesheet as well, otherwise the site I linked to could still scan your history without JS.

**atlantis** · 16.12.09, 22:05

Congratulations, we did not find anything in this category in your browser history.
Feel free to try our other browser history tests.

I allowed for the site noscript and again I'm clean :) and I forgot to say, I have refcontrol addon too

**Renk** · 07.03.10, 21:59

Originally Posted by Dynamic

Is there a way to have both Private and Normal mode up at the same time in FF?

I have found an experimental FF addon for that:

https://addons.mozilla.org/fr/firefox/addon/59736

This extension replaces firefox's default private browsing mode. Instead, it allows users to have private browsing and normal browsing windows simultaneously. Having both private and normal browsing windows enables you to do things like using two yahoo mail accounts or two facebook accounts simultaneously... one in a normal window and one in a private browsing window.

**Zoltar600** · 23.04.10, 01:28

Originally Posted by Renk

I have found an experimental FF addon for that:

https://addons.mozilla.org/fr/firefox/addon/59736

Look like the addon's had a short lifespan. Link no longer works.

Links for the CSS leak test also dead. Does anyone have a working link? Thanks

Also, with noscript is it enough to block sb-innovation.de or should i block scipts from any tracker I'm a member of?

**alpacino** · 23.04.10, 04:51

Originally Posted by Zoltar600

Also, with noscript is it enough to block sb-innovation.de or should i block scipts from any tracker I'm a member of?

Blocking scripts is not enough to be safe from these attacks, because you will still be registering an history of pages you visited. My recommendation would be using an exclusive browser for sb-i or using the "private session" browsing feature most new browsers have, which don't keep history/cache or cookies from sessions.

**anon** · 23.04.10, 15:03

Originally Posted by Zoltar600

Also, with noscript is it enough to block sb-innovation.de or should i block scipts from any tracker I'm a member of?

It's not our forum you have to block...

I'm using the custom stylesheet and disabled JavaScript for trackers using this method, with no real loss of functionality.

**Zoltar600** · 23.04.10, 17:31

Originally Posted by alpacino

Blocking scripts is not enough to be safe from these attacks, because you will still be registering an history of pages you visited. My recommendation would be using an exclusive browser for sb-i or using the "private session" browsing feature most new browsers have, which don't keep history/cache or cookies from sessions.

Well I'm also using Refcontrol to block referrers. Is that enough?