Hacker GitHub

← All repos

diracdeltas/sniffly

View on GitHub ↗ ★ 935 JavaScript

Sniffing browser history using HSTS

9 mentions on Hacker News by 8 people: 2 stories, 7 comments · first 2015-10-26 · latest 2018-01-19

Mentions per year 9 mentions · busiest year 2015 (7)
20082026
AllStoriesComments NewestTopOldest
  1. …apply to incognito to my knowledge Here’s a project that uses this fact to look up browser history: https://github.com/diracdeltas/sniffly
    comment by varenc · 2018-01-19 · in Want to use my wifi? (2013)
  2. …whitelist some websites). [1] https://amiunique.org/ [2] https://github.com/ben174/hsts-cookie [3] https://github.com/diracdeltas/sniffly
    comment by progval · 2017-03-28 · in Show HN: Kite, copilot for programmers, available for Python
  3. …And then using that information to fingerprint you. Demo: http://zyan.scripts.mit.edu/sniffly Code: https://github.com/diracdeltas/sniffly It's a good find, even if it's not perfect the way the CSS link visited computed style checks was.
    comment by bigethan · 2015-11-03 · in New Tricks for Browser Fingerprinting [pdf]
  4. More Related Resources: GitHub: https://github.com/diracdeltas/sniffly Sniffly: http://zyan.scripts.mit.edu/sniffly/ Blog Post: https://zyan.scripts.mit.edu/blog/sniffly/
    comment by tux · 2015-10-28 · in Unpatched browser weaknesses can be exploited to track millions of Web users
  5. ▲ 1
    Sniffing browser history using HSTS and CSP
    story by tsudot · 2015-10-28 · 0 comments
  6. Preloaded HSTS entries are filtered out https://github.com/diracdeltas/sniffly/blob/c645af76cb53a21a...
    comment by runesoerensen · 2015-10-27 · in Timing attack against HSTS to sniff browser history in Chrome and Firefox
  7. what browser and extensions? feel free to file a bug at github.com/diracdeltas/sniffly
    comment by bcrypt · 2015-10-27 · in Timing attack against HSTS to sniff browser history in Chrome and Firefox
  8. interesting, are you using any browser addons? please file a bug at https://github.com/diracdeltas/sniffly , thanks
    comment by bcrypt · 2015-10-27 · in Timing attack against HSTS to sniff browser history in Chrome and Firefox
  9. ▲ 17
    Sniffing browser history using HSTS and CSP
    story by r4vik · 2015-10-26 · 0 comments