Web Hack List

Collected research

Timing Attacks on CSS Shaders

Scheme/Host/Port: Timing Attacks on CSS Shaders

Barth argues the CSS Shaders proposal repeats WebGL's timing flaw: shader run time depends on pixel values, so a site can read content it may display but not read, such as a Facebook Like button or visited-link styling. MozBeforePaint, MozAfterPaint and requestAnimationFrame all expose paint timing, making the spec's claim that timing is hard to measure dubious.

Record

Document
Scheme/Host/Port: Timing Attacks on CSS Shaders
Researcher
Adam Barth
Published by
schemehostport.com
Topic
Other

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Adam Barth, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .