Collected research

Brute-forcing a macOS user's real name from a browser using mDNS

Uses browser request timing to distinguish an existing mDNS hostname from a nonexistent one. Brute-forcing predictable, localized macOS hostnames can reveal a likely first name and provides a general local-device discovery oracle without direct UDP access.

Record

Published by

Fingerprint

In the archive

• Collected in the 2023 research round

Tags

• timing-attack
• privacy
• browser-fingerprinting
• info-leak
• localhost

This page is the archive's own catalogue record. The research is the work of Fingerprint, first published at the original source. Preserved copies are kept so the citation survives its host.