Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Pixel Perfect Timing Attacks with HTML5

Black Hat via YouTube

Overview

Explore cutting-edge techniques for JavaScript-based timing attacks to extract sensitive data from web browsers in this 52-minute Black Hat USA 2013 conference talk. Delve into the unexpected security and privacy threats arising from subtle interactions between new HTML5 browser features. Discover cross-browser vulnerabilities affecting Chrome, Internet Explorer, and Firefox that can compromise browsing history and logged-in website data. Examine the challenges of fixing these vulnerabilities and learn about innovative concepts such as CSS history sniffing, requestAnimation Frame, SVG filter effects, and pixel-perfect OCR. Gain insights into browser black boxes, page request timing, and the complexities of addressing timing attacks in modern web browsers.

Syllabus

Intro
Browser Black Boxes
Page Request Timing
Timing Attack Problems
CSS History Sniffing
requestAnimation Frame
Detecting Repaints
SVG Filter Effects
SVG Timing Attack Filter
Pixel-Perfect OCR
Fixing Timing Attacks

Taught by

Black Hat

Reviews

Start your review of Pixel Perfect Timing Attacks with HTML5

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.