Collected research

Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses

[2103.04952] Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses

Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell, Daniel Genkin, Yossi Oren and Yuval Yarom · arXiv.org

Cache side-channel attacks rebuilt with progressively fewer JavaScript features, ending in one written entirely in CSS and HTML that works with scripting fully disabled. It fingerprints which website a victim is visiting, works across Intel, AMD, Exynos and Apple M1, and is not stopped by Tor Browser, DeterFox or Chrome Zero.

Record

Document

[2103.04952] Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses

Researcher

Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell, Daniel Genkin, Yossi Oren and Yuval Yarom

Published by

arXiv.org

Topic

Browser

In the archive

• Collected in the 2021 research round

Related sources

• USENIX Security '21 - Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses

Tags

• side-channel
• xsleak
• timing-attack
• css
• info-leak
• javascript
• defence

This page is the archive's own catalogue record. The research is the work of Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell, Daniel Genkin, Yossi Oren and Yuval Yarom, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.