Another interesting, more recent paper (I couldn't find a link to the actual pdf, but I'm sure people are resourceful): http://dl.acm.org/citation.cfm?id=25167

Another interesting, more recent paper (I couldn't find a link to the actual pdf, but I'm sure people are resourceful): http://dl.acm.org/citation.cfm?id=2516712 http://dl.acm.org/citation.cfm?id=2516712 This one describes an attack to not only steal browser history, but to reconstruct pages from the users cache.