You’re only 3 weeks away from a new language
AI Engineer - Learn how to integrate AI into software applications
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore cutting-edge techniques for JavaScript-based timing attacks to extract sensitive data from web browsers in this 52-minute Black Hat USA 2013 conference talk. Delve into the unexpected security and privacy threats arising from subtle interactions between new HTML5 browser features. Discover cross-browser vulnerabilities affecting Chrome, Internet Explorer, and Firefox that can compromise browsing history and logged-in website data. Examine the challenges of fixing these vulnerabilities and learn about innovative concepts such as CSS history sniffing, requestAnimation Frame, SVG filter effects, and pixel-perfect OCR. Gain insights into browser black boxes, page request timing, and the complexities of addressing timing attacks in modern web browsers.
Syllabus
Intro
Browser Black Boxes
Page Request Timing
Timing Attack Problems
CSS History Sniffing
requestAnimation Frame
Detecting Repaints
SVG Filter Effects
SVG Timing Attack Filter
Pixel-Perfect OCR
Fixing Timing Attacks
Taught by
Black Hat