www.webdeveloper.com
Results 1 to 5 of 5

Thread: Is history sniffing possible?

  1. #1
    Join Date
    Mar 2011
    Posts
    105

    Is history sniffing possible?

    Hi. I actually have a legit white-hat application for history sniffing, but according to what I've been reading, it's pretty much impossible with modern browsers. Have there been any recent developments?

  2. #2
    Join Date
    May 2006
    Location
    Somewhere behind your screen
    Posts
    1,654
    hacking is no good, repent you sinner

  3. #3
    Join Date
    Mar 2007
    Location
    U.K.
    Posts
    1,127
    Quote Originally Posted by Pacopag View Post
    Have there been any recent developments?
    Indeed there have, meaning that the flaws that used to allow it have largely been fixed.

  4. #4
    Join Date
    Jul 2008
    Location
    urbana, il
    Posts
    2,787
    you can use img tags to ping remote sites. using a known new site as a baseline, you can compare ping times for different sites. it's not 100%, but already-visited sites reliably ping faster than novel sites owing to dns caching.

    say you ping 5 sites and get timings like this

    Code:
    timings={
      google:  60,
      yahoo: 220,
      msn:   88,
      aol:    55,
      ask:  192
    };
    
    
    function obVals(ob) {
        var r = [], i = 0;
        for (var z in ob) { if (ob.hasOwnProperty(z)) {
                r[i++] = ob[z];
        }}
      return r;
    }
    
    
    //find avg ping time:
    var avg=obVals(timings).reduce(function(a, b) {return a + b;}) / obVals(timings).length
    
    //make a visited site bucket:
    var visited=[];
    
    //collect visited site names here:
    for(var i in o){
     if(o[i]<avg){visited.push(i);}
    }
    
    
    //show the faster than avg sites:
    alert("Visited Sites :\n\n"+visited.join("\n"));



    as far as specific pages go, afaik, any leftover history leaks have dried up...
    Last edited by rnd me; 04-30-2012 at 07:09 PM.

  5. #5
    Join Date
    May 2012
    Location
    Armenia
    Posts
    1
    Quote Originally Posted by rnd me View Post
    you can use img tags to ping remote sites. using a known new site as a baseline, you can compare ping times for different sites. it's not 100%, but already-visited sites reliably ping faster than novel sites owing to dns caching.

    say you ping 5 sites and get timings like this

    Code:
    timings={
      google:  60,
      yahoo: 220,
      msn:   88,
      aol:    55,
      ask:  192
    };
    
    
    function obVals(ob) {
        var r = [], i = 0;
        for (var z in ob) { if (ob.hasOwnProperty(z)) {
                r[i++] = ob[z];
        }}
      return r;
    }
    
    
    //find avg ping time:
    var avg=obVals(timings).reduce(function(a, b) {return a + b;}) / obVals(timings).length
    
    //make a visited site bucket:
    var visited=[];
    
    //collect visited site names here:
    for(var i in o){
     if(o[i]<avg){visited.push(i);}
    }
    
    
    //show the faster than avg sites:
    alert("Visited Sites :\n\n"+visited.join("\n"));



    as far as specific pages go, afaik, any leftover history leaks have dried up...
    Thanks you , it is helpful information .

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
HTML5 Development Center



Recent Articles