3 ms·
I don't understand the point of this. What elements will a timing attack work against that you can't read the value from directly? I didn't notice any discussio
by driverdan 8y ago
I don't understand the point of this. What elements will a timing attack work against that you can't read the value from directly? I didn't notice any discussion of this in the article.
Edit: I see how this works. It will allow you to exfiltrate data from 3rd party websites that pass the URL hash into jQuery. An interesting idea but limited in scope.
- deleted 8y ago[deleted]
- Novashi 8y agoI still don't get it. How are you getting a successful request and a page render for the 3rd party site, but not able to query the 3rd party DOM? If you phished someone, there's probably better things you can do to lead to a fuller compromise.
- shawnz 8y agoIt's described right in the article: embed the victim page in an iframe. Because of the same-origin policy you shouldn't be able to access its DOM, but with this trick, you can.