Printable View
Quote:
Stealing your history...
...without Javascript!
My previous demo of sniffing a user's history was pretty effective. However, a lot of people commented on it not working with NoScript, naturally. So, I set to work to create a version that does work even if you have NoScript enabled. If the previous version didn't shock you, this one ought to.
Sniffing Browser History with NO Javascript!
The link I gave don't work anymore.
Here is an other:
What the Internet knows about you
But I don't now at this momment what kind of hole it uses.
Seems it uses both JS and CSS attacks, there's more info here:
http://whattheinternetknowsaboutyou....s/details.html
So this isn't using any new "bug", therefore nothing to fear for. :tongue:
I though so, without being entirely sure.Quote:
Originally Posted by anon
On one of my browser, I don't use noscript, but have only SafeHistory & SafeCache installed, and the site could not see any fragment of my history.
I like very much this question in the FAQ:
:biggrin:Quote:
Q: I am a very popular conservative politician. Also, I do like visiting adult websites. Should I be concerned?
I just did the JavaScript-based test and it could find five of my visited sites, even though I have disabled history in Opera... :confused:Quote:
On one of my browser, I don't use noscript, but have only SafeHistory & SafeCache installed, and the site could not see any fragment of my history.
Edit: happens on both v10 and v9.64.
Edit 2: after adding the code shoulder posted on his CSS leak tutorial to my Opera custom style sheet and forcing all pages to use it, I get:
I remember Zorvak mentioned a "randomstring" attack I should still be vulnerable to, though.Quote:
Congratulations, we did not find anything in this category in your browser history.
Feel free to try our other browser history tests.