Later archive addition

Stealing sensitive browser data with the W3C Ambient Light Sensor API

Lukasz Olejnik · Security and Privacy Tech Inquiries · 19 April 2017

The article shows that screen pixels influence ambient-light readings exposed to browser JavaScript. By making visited-link state or cross-origin image bits control screen brightness, an attacker can recover otherwise isolated information one bit at a time through the sensor feedback channel.

Record

Researcher

Lukasz Olejnik

Published by

Security and Privacy Tech Inquiries

Date

19 April 2017

In the archive

• Added to the 2016–17 archive after the original list was published

Tags

• side-channel
• browser
• javascript
• info-leak
• same-origin-policy
• ambient-light-sensor
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Lukasz Olejnik, first published at the original source. Preserved copies are kept so the citation survives its host.