Collected research

I Still Know What You Visited Last Summer: Leaking Browsing History via User Interaction and Side Channel Attacks

Zachary Weinberg, Eric Y. Chen, Pavithra Ramesh Jayaraman and Collin Jackson · research.owlfolio.org

Browsers blocked automated CSS history sniffing in 2010, so this paper shows what survives. Four fake CAPTCHA and puzzle tasks trick users into typing or clicking what they see, leaking visited links at up to 1000 queries per minute; a study of 307 Mechanical Turk workers measured accuracy and speed. A second attack reads screen colour reflected off the user via their webcam.

Record

Researcher

Zachary Weinberg, Eric Y. Chen, Pavithra Ramesh Jayaraman and Collin Jackson

Published by

research.owlfolio.org

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2011 research round

Tags

• side-channel
• xsleak
• info-leak
• css
• javascript
• measurement-study
• timing-attack

This page is the archive's own catalogue record. The research is the work of Zachary Weinberg, Eric Y. Chen, Pavithra Ramesh Jayaraman and Collin Jackson, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.