Here's a mirror: https://dl.dropboxusercontent.com/u/192234503/jspy/index.htm... I'm really sorry that my hosting's down.
The mirror does not seem to work just gets stuck on Calibrating.
jSpy: Automatically detect user's history
11–20 of 43 posts
Re: jSpy: Automatically detect user's history
#12Here's a mirror: https://dl.dropboxusercontent.com/u/192234503/jspy/index.htm... I'm really sorry that my hosting's down.
I tried using Firefox 29.0.1 on a Mac OS 10.8.5 and didn't work.
Just shows Calibrating and never starts processing.
Re: jSpy: Automatically detect user's history
#13Here's a mirror: https://dl.dropboxusercontent.com/u/192234503/jspy/index.htm... I'm really sorry that my hosting's down.
You call that hosting? :P Well I used to offer people on forums to host with me instead of the terrible 000webhost... in theory I could set things up for you (free of course), though I'd have to see how I want to arrange things, haven't had users other than myself on my server in a while now.
I'm setting up a paid GoDaddy host as we speak...
Re: jSpy: Automatically detect user's history
#14Re: jSpy: Automatically detect user's history
#15Here's a mirror: https://dl.dropboxusercontent.com/u/192234503/jspy/index.htm... I'm really sorry that my hosting's down.
The website is now working, hosted on GoDaddy instead of the free 000webhost. I'm sorry for the downtime, I wasn't expecting a lot of visitors.
Re: jSpy: Automatically detect user's history
#16Unless I'm missing something, it doesn't collect your history but rather can test whether you have visited a URL before. While still a problem, it's certainly a different thing.
Re: jSpy: Automatically detect user's history
#17Unless I'm missing something, it doesn't collect your history but rather can test whether you have visited a URL before. While still a problem, it's certainly a different thing.
This vector has been known for many years.
Re: jSpy: Automatically detect user's history
#18Unless I'm missing something, it doesn't collect your history but rather can test whether you have visited a URL before. While still a problem, it's certainly a different thing.
Yes, it would be crazy if it could collect history. But it can be used to target ads much better and create user "profiles" (and track users by cookies on a network of websites) and for example much better target products on an e-commerce website... It doesn't have to be used for evil, but it certainly can, and can be automated.
Re: jSpy: Automatically detect user's history
#19Unless I'm missing something, it doesn't collect your history but rather can test whether you have visited a URL before. While still a problem, it's certainly a different thing.
Ok, we changed "collect" to "detect" in the title.
Re: jSpy: Automatically detect user's history
#20This attack isn’t new – the first proof of concept I know of that worked well is from 2011: http://lcamtuf.blogspot.com/2011/12/css-visited-may-be-bit-o...