Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Me too. This "attack" is very old and well-known on the browser side. It doesn't work particularly well on me because I keep no history.


I had never heard of it before. I wouldn't consider myself anywhere near an expert on client-side exploits but still...

I keep up with most tech-related news as well as I can and I had never heard of it until now...

I'd be interested to see how many people actually have heard about it before.


This isn't an exploit, it is a feature of almost every modern browser.


Applying different style to visited links is a feature. The trick to pull the info back to server is an exploit.


I wasn't aware that sharing your browser history with every website that cares to check it was a 'feature'.


I think that was the point...

Most people aren't aware of this.

Hopefully it was a success for you!


Care to point to a wikipedia entry or something on this 'attack'? I can't even access the site.


I assume that it's simply setting styles on links using the ":visited" pseudo-selector, and then either:

1. Using JavaScript to get the rendered style, and thus work out whether you've visited a particular URL, or

2. Setting background images on links which only apply when visited, and checking whether your browser retrieved those images.

It's a rather old and well-known trick.


Ok. Since I couldn't access the site, I didn't even know what it was supposed to be doing... other than 'an old and well-known trick' and something to do with browser history.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: