Chrome Question: How come on the Network tab on the Developer Tools window (F12) I cannot see any of the traffic to the hundreds of sites the browser is pinging to render into iframes?
jSpy: Automatically detect user's history
41–43 of 43 posts
Re: jSpy: Automatically detect user's history
#42Earlier quoted context omitted.
This vector has been known for many years.
And has been largely fixed for several. See e.g. https://developer.mozilla.org/en-US/docs/Web/CSS/Privacy_and...
Actually it's not using the JavaScript for checking the link color and instead is using a timing attack, so that link makes no sense.
Re: jSpy: Automatically detect user's history
#43Chrome Question: How come on the Network tab on the Developer Tools window (F12) I cannot see any of the traffic to the hundreds of sites the browser is pinging to render into iframes?
What iframes? First of all, most sites don't allow themselves to be embedded into iframes, either with X-Frame-Options or a framebuster (or anti anti framebuster) scripts. Why would the script load sites into iframes? Where does it say that the script does load sites into iframes? It just checks into it's history database and that takes times.