Later archive addition

Leaky Images: Targeted Privacy Attacks in the Web

Cristian-Alexandru Staicu and Michael Pradel

Leaky images let an attacker privately share an authenticated image with a target, embed it cross-site, and infer whether that exact user visited based on load success. The paper extends the technique to group tracking, cross-service pseudonym linking, and scriptless deanonymization, finding vulnerable sharing flows on at least eight of 30 popular services.

Record

Researcher

Cristian-Alexandru Staicu and Michael Pradel

In the archive

• Added to the 2019 archive after the original list was published

Related sources

• Talk recording

Tags

• xsleak
• deanonymization
• info-leak
• privacy
• same-origin-policy
• csrf
• measurement-study
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Cristian-Alexandru Staicu and Michael Pradel, first published at the original source. Preserved copies are kept so the citation survives its host.