Other nomination
Timing Attacks on CSS Shaders
Barth argues the CSS Shaders proposal repeats WebGL's timing flaw: shader run time depends on pixel values, so a site can read content it may display but not read, such as a Facebook Like button or visited-link styling. MozBeforePaint, MozAfterPaint and requestAnimationFrame all expose paint timing, making the spec's claim that timing is hard to measure dubious.
Record
- Researcher
- Adam Barth
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Adam Barth, first published at the original source. Preserved copies are kept so the citation survives its host.