6 ms·
is user input needed or can it be done without it?
by throwawayadvsec 3y ago
is user input needed or can it be done without it?
- jesprenj 3y agoneeded
- throwawayadvsec 3y agoso I just spent the last hour tinkering with it, I think there is definetly room for some timing attack, at least on firefox, there is a pattern
- varun_ch 3y agoHere's a timing attack that doesn't need any user interaction: https://ndev.tk/visted/ https://ndev.tk/visted/
- throwawayadvsec 3y agoawesome thanks!
- jfk13 3y agoOnly seems to work in Chrome (not Safari or Firefox).