「JavaScriptを使わずにWebブラウザの閲覧履歴を盗む」記事へのコメント

古くて新しい問題

[Anonymous Coward]

http://takagi-hiromitsu.jp/diary/20081019.html [takagi-hiromitsu.jp] によると、2001年から、というか2000年から指摘があった問題なのですね。

• Edward W. Felten and Michael A. Schneider, "Timing attacks on Web privacy", Proceedings of the 7th ACM conference on Computer and communications security, pp.25-32 (Nov 2000)
• Ari Juels, "Targeted Advertising ... And Privacy Too", Proceedings of the 2001 Conference on Topics in Cryptology: The Cryptographer's Track at RSA, Lecture Notes In Computer Science, Vol. 2020, pp.408-424 (2001)
• CSS visited pages disclosure [neohapsis.com], Bugtraq, 2002年2月20日
• bid:4136, W3C CSS :visited Pseudo-Class Information Disclosure Vulnerability [securityfocus.com], SecurityFocus
• Bug 147777 – :visited support allows queries into global history [mozilla.org], Bugzilla@Mozilla, 2002年5月
• Markus Jakobsson and Sid Stamm, "Invasive Browser Sniffing and Countermeasures", Proceedings of the 15th international conference on World Wide Web, pp.523-532 (May 2006)
• Guessing Your Bank [indiana.edu]
• Markus Jakobsson, Ari Juels and Jacob Ratkiewicz, "Privacy-Preserving History Mining for Web Browsers [rsa.com]", W2SP 2008: Web 2.0 security and privacy 2008 (May 2008)