Back

Your Web Surfing History Is Accessible (w/o Permission) Via Javascript

#1
http://www.sciencedaily.com/releases/201...091451.htm

"The Web surfing history saved in your Web browser can be accessed without your permission. JavaScript code deployed by real websites and online advertising providers use browser vulnerabilities to determine which sites you have and have not visited, according to new research from computer scientists at the University of California, San Diego."

Basically it's an empirical analysis of the problem noted by this site, which I've mentioned a couple of times before: http://www.whattheinternetknowsaboutyou.com/

Solution (after you visit that page and freak out): https://addons.mozilla.org/en-US/firefox/addon/12312/ (Use "disable visited link styling", plus it's just a useful tool in general. ;p)

Edit: Looks like recently the other browsers have also fixed this problem, good to know.
Edited: 2010-12-09, 1:40 am
Reply
#2
This hack is quite old. And it doesn't need Javascript.
Edited: 2010-12-10, 11:42 am
Reply
#3
What? Only one porn site? This can't be right.
Reply
May 16 - 30 : Pretty Big Deal: Save 31% on all Premium Subscriptions! - Sign up here
JapanesePod101
#4
iSoron Wrote:This hack quite old. And it doesn't need Javascript.
Yeah, it's noted in links above that it's old and only relatively recently that it's been addressed and studied due to growing awareness. Apparently some of the sites that do it are even from the Top 100 Alexa sites. I don't think they're suggesting that it needs JavaScript but that's what's used.

https://bugzilla.mozilla.org/show_bug.cgi?id=147777

@Evil_Dragon - You must've freaked out the site so much it couldn't bear to present any more of your history.

Original paper: http://cseweb.ucsd.edu/~d1jang/papers/ccs10.pdf
Edited: 2010-12-09, 6:29 pm
Reply
#5
All those tests found no history of mine. Was this fixed in Firefox, or do my countless privacy plugins deal with this matter, I wonder?

Edit: Above link confirmed that this was taken care of in Firefox.
Edited: 2010-12-10, 6:47 am
Reply
#6
All the browsers seem to have built-in fixes now, at least in the newest versions. All except IE? I think.
Edited: 2010-12-10, 6:51 am
Reply