Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
1–10 of 71 posts
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#2The fact only chromium based browsers are effected makes me think really the problem lies with the browser. However, still using the result of compression as a delta to extract sensitive data is not exactly new.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#3The fact only chromium based browsers are effected makes me think really the problem lies with the browser. However, still using the result of compression as a delta to extract sensitive data is not exactly new.
Yes, I found it interesting that Safari and Firefox are immune. Perhaps this should be framed as another chromium-based exploit rather than a GPU issue.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#4But is it really stealing if the owner isn't deprived of use? It's just costless duplication of a nonscarce resource.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#5But is it really stealing if the owner isn't deprived of use? It's just costless duplication of a nonscarce resource.
I know it's a non-serious play on the piracy/theft meme, but in seriousness, "stealing" is probably not the right word for private information leakage.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#6But is it really stealing if the owner isn't deprived of use? It's just costless duplication of a nonscarce resource.
It's a bit odd to think of a password as a "non-scarce resource" when they protect scarce resources.
I expect they're not often visible, though.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#7But is it really stealing if the owner isn't deprived of use? It's just costless duplication of a nonscarce resource.
Someone stealing my password can go hunter2ing their hunter2 in their hunter2.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#8The fact only chromium based browsers are effected makes me think really the problem lies with the browser. However, still using the result of compression as a delta to extract sensitive data is not exactly new.
Yes, I found it interesting that Safari and Firefox are immune. Perhaps this should be framed as another chromium-based exploit rather than a GPU issue.
In this case it's because Chrome supports a relatively obscure use case (GPU-accelerated CSS filters on a cross-origin iframe), it's not really a bug or a vulnerability in the browser.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#9But is it really stealing if the owner isn't deprived of use? It's just costless duplication of a nonscarce resource.
The word is used to refer to taking something without the right to do so. The key part is the lack of a right to do so, not depriving the owner.
e.g. If you take someone's car while they're away on vacation and bring it back before they get home, it is still stealing, even if you topped up the tank and they never noticed.
Re: Sidechannel pixel-stealing attack works in Chromium on all modern GPUs
#10But is it really stealing if the owner isn't deprived of use? It's just costless duplication of a nonscarce resource.
It takes ~1hour to grab an unspecified portion of the screen (screenshots show a tiny 100x100 or so box). I'd say not costless.