3 ms·
IIRC you can use the android shared webview to determine if a site is in cache on the system by measuring access times.
by worthless-trash 4y ago
IIRC you can use the android shared webview to determine if a site is in cache on the system by measuring access times.
- daenz 4y agoSounds similar to a timing attack[0] 0. https://en.wikipedia.org/wiki/Timing_attack https://en.wikipedia.org/wiki/Timing_attack
- worthless-trash 4y agoVery similar... Inferring data through response time.
- bencollier49 4y agoDo you not get access to the response code as well? That would be simpler.
- jazzyjackson 4y agooff the top of my head, the response code from cache is simply 200 OK, is it not?
- bencollier49 4y agoInteresting, I just looked and certainly in FF it now is. I have a distinct memory of locally cached files returning a 3xx in the past, though.
- jazzyjackson 4y agoI think that would happen in combination with the remote server replying "304 Not Modified" Now that you mentioned it tho, I'm not sure whether developer tools is showing me the ground truth, how does it give me 200 OK from cache without asking the remote whether the resource has changed? My memory agrees with you, something has changed in the matrix.