3 ms·
> Habalov says that depending on the time needed to render the entire stack of DIVs, an attacker can determine the color of that pixel shown on the user's scree
by 2bitencryption 8y ago
> Habalov says that depending on the time needed to render the entire stack of DIVs, an attacker can determine the color of that pixel shown on the user's screen.
I wonder how this is the case?
Anyway, lots of interesting vulnerabilities of late that utilize the measurable time of computations, and use it to reconstruct data. I think that type of "lossy attack" is so cool and creative.
- recursive 8y agoA fancy darkening algorithm on #000 can be short-circuited. I don't know if that's precisely what's going on here, but it's a general example.
- Sharlin 8y agoThe link was changed to point to Habalov's own in-depth article [1]. [1] https://www.evonide.com/side-channel-attacking-browsers-through-css3-features/ https://www.evonide.com/side-channel-attacking-browsers-thro...