Web Hack List

Top 10 winner

Pixel Perfect Timing Attacks with HTML5

Paul Stone demonstrates browser timing attacks using SVG filters to recover pixels and distinguish visited links. The OCR proof of concept recognises hexadecimal text by sampling four distinct pixels per character, with repeated timing readings for accuracy and known font, size, position and character set.

Record

Researcher
Paul Stone
Published by
Context Information Security

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Paul Stone, first published at the original source. Preserved copies are kept so the citation survives its host.