[deleted]
Who am I: A mind reader (don't forget to view source)
21–30 of 181 posts
Re: Who am I: A mind reader (don't forget to view source)
#22Here's the same exploit disguised as a game, to make it less obvious that it's tricking the user into interacting with it: http://lcamtuf.coredump.cx/yahh/
Documentation of the game proof-of-concept: http://lcamtuf.blogspot.com/2013/05/some-harmless-old-fashio...
Re: Who am I: A mind reader (don't forget to view source)
#23[deleted]
Re: Who am I: A mind reader (don't forget to view source)
#24If you open the console and run this script, it'll click every single square, giving a list of the most common types of sites in the array being used:
for(i=0;iRe: Who am I: A mind reader (don't forget to view source)
#25Earlier quoted context omitted.
This is a very old attack that has numerous security measures to prevent you from doing that now.
I presumed as much. But if you can covertly jimmy the UI and parse the user's interaction, you can more or less get at the history like that anyway. I don't see any secure way to handle this besides disallowing :visited styling entirely.
It's surprisingly hard to do. Since the allowed styling does not affect positioning in any way (you used to be able to change the font-weight, but not anymore) and the browser removes all :visited styling for client side html-image libraries such as html2canvas you need to generate a massive amount of clicks from the user or have them targeted only to visited elements such as this page does.
Re: Who am I: A mind reader (don't forget to view source)
#26Doesn't work for me because I disabled :visited last time this sort of thing got discussed. :V
Re: Who am I: A mind reader (don't forget to view source)
#27No red squares here. Am I doing it wrong?
Re: Who am I: A mind reader (don't forget to view source)
#28Haha, should have been pr0n sites :P
Re: Who am I: A mind reader (don't forget to view source)
#29Hm. Do you really need interaction at all? Can't you just :visited { margin/pos/whatever }, then probe the dom on that or related elems to extract the juice? Or have browser vendors thought of this?
I remember there being a long string of attacks related to hooks of this kind, but as far as I know it is no longer a problem at all.
It's a good example of just how difficult browser security is.
Re: Who am I: A mind reader (don't forget to view source)
#30I am ???