Other nomination

Using CSS to De-Anonymize

Applies Grossman's CSS history hack to internal hostnames such as intranet.company.com to identify which organisation a visitor belongs to, defeating network-level anonymisers and referrer stripping. If the history is clear, the victim's browser can be forced to the intranet URL first to seed it. Enables organisation-targeted attacks.

In the archive

• Nominated for the 2006 Top 10 Web Hacking Techniques

Tags

• css
• deanonymization
• info-leak
• side-channel
• browser-fingerprinting
• proxy
• prior-art-extension

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.