Rocksolid Light

Welcome to Rocksolid Light

mail  files  register  newsreader  groups  login

Message-ID:  

We have a equal opportunity Calculus class -- it's fully integrated.


computers / Security / Re: Sidechannel attack via js

SubjectAuthor
* Sidechannel attack via jsanon
+* Sidechannel attack via jsanon
|`- Sidechannel attack via jsGuest
`- Sidechannel attack via jsAnonUser

1
Re: Sidechannel attack via js

<23e9465f2ee22079d9f6699d625a53f6@def4.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=1&group=rocksolid.shared.security#1

  copy link   Newsgroups: rocksolid.shared.security
Path: i2pn2.org!rocksolid2!def3!.POSTED.localhost!not-for-mail
From: anon@anon.com (anon)
Newsgroups: rocksolid.shared.security
Message-ID: <23e9465f2ee22079d9f6699d625a53f6@def4.com>
Subject: Re: Sidechannel attack via js
Date: Fri, 23 Nov 2018 10:36:38+0000
Organization: def4
In-Reply-To: <89f6f4d28afd9a02e68b4d8709d674b8@def4.com>
References: <89f6f4d28afd9a02e68b4d8709d674b8@def4.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
 by: anon - Fri, 23 Nov 2018 10:36 UTC

>different browser for banking and similar than one for just screwing around online.

I think for this it is best to use different physical devices.

Posted on def4.i2p

Re: Sidechannel attack via js

<pv5vpp$qb6$1@def3.retrobbs.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=3&group=rocksolid.shared.security#3

  copy link   Newsgroups: rocksolid.shared.security
Path: i2pn2.org!rocksolid2!def3!.POSTED!not-for-mail
From: guest@retrobbs.rocksolidbbs.com (Guest)
Newsgroups: rocksolid.shared.security
Subject: Re: Sidechannel attack via js
Date: Sun, 16 Dec 2018 12:00:23 -0500
Organization: Dancing elephants
Lines: 2
Message-ID: <pv5vpp$qb6$1@def3.retrobbs.com>
References: <23e9465f2ee22079d9f6699d625a53f6@def4.com>
Reply-To: Guest <guest@retrobbs.rocksolidbbs.com>
NNTP-Posting-Host: 10.0.2.2
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: def3.retrobbs.com 1544979065 26982 10.0.2.2 (16 Dec 2018 16:51:05 GMT)
X-Complaints-To: usenet@def3.retrobbs.com
NNTP-Posting-Date: Sun, 16 Dec 2018 16:51:05 +0000 (UTC)
User-Agent: FUDforum 3.0.7
X-FUDforum: e4062714e2d275bd0cc7c3ee636428b0 <4800>
 by: Guest - Sun, 16 Dec 2018 17:00 UTC

Switch to IceCat or Links and configure Searxes addon.
Posted on: def3.i2p

Sidechannel attack via js

<89f6f4d28afd9a02e68b4d8709d674b8@def4.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=389&group=rocksolid.shared.security#389

  copy link   Newsgroups: rocksolid.shared.security
Path: rocksolid2!def3!.POSTED.localhost!not-for-mail
From: anon@anon.com (anon)
Newsgroups: rocksolid.shared.security
Message-ID: <89f6f4d28afd9a02e68b4d8709d674b8@def4.com>
Subject: Sidechannel attack via js
Date: Thu, 22 Nov 2018 23:43:21+0000
Organization: def4
In-Reply-To:
References:
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
 by: anon - Thu, 22 Nov 2018 23:43 UTC

Quote:

In this work we show that cache website fingerprinting
attacks in JavaScript are highly feasible, even when they are run from highly restrictive environments, such as the Tor Browser.

/Quote

So, if you have js enabled, each website can check what other sites you visit atm.

Full paper here:
https://arxiv.org/pdf/1811.07153.pdf

Posted on def4.i2p

Re: Sidechannel attack via js

<a8c23f17e1d82e7cf730d38988ae6ce0$1@retrobbs.rocksolidbbs.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=391&group=rocksolid.shared.security#391

  copy link   Newsgroups: rocksolid.shared.security
Path: rocksolid2!.POSTED.retrobbs!not-for-mail
From: anonuser@retrobbs.rocksolidbbs.com.remove-4lh-this (AnonUser)
Newsgroups: rocksolid.shared.security
Subject: Re: Sidechannel attack via js
Date: Fri, 23 Nov 2018 03:27:18 +0000
Organization: RetroBBS
Message-ID: <a8c23f17e1d82e7cf730d38988ae6ce0$1@retrobbs.rocksolidbbs.com>
References: <89f6f4d28afd9a02e68b4d8709d674b8@def4.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Info: novabbs.com; posting-host="retrobbs:10.128.3.129";
logging-data="648"; mail-complaints-to="usenet@novabbs.com"
To: anon
X-Comment-To: anon
In-Reply-To: <89f6f4d28afd9a02e68b4d8709d674b8@def4.com>
X-FTN-PID: Synchronet 3.17a-Linux Feb 20 2018 GCC 6.3.0
X-Gateway: retrobbs.rocksolidbbs.com [Synchronet 3.17a-Linux NewsLink 1.108]
 by: AnonUser - Fri, 23 Nov 2018 03:27 UTC

To: anon
Another reason to use different browsers for different purposes.

Not just different networks, I use a different browser for banking and
similar than one for just screwing around online.

--
Posted on RetroBBS
--- Synchronet 3.17a-Linux NewsLink 1.108
Posted on RetroBBS

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor