Web Hack List

Collected research

Leaky Images: Targeted Privacy Attacks in the Web

An image shared privately with one user is requested by an attacker-controlled page, and the load succeeds only for that logged-in user, revealing that a specific person is visiting the site. It needs neither JavaScript nor CSS, extends to tracking groups and linking identities across sites, and affected eight of the thirty most popular image-sharing sites including Facebook and Twitter.

Record

Researcher
Cristian-Alexandru Staicu and Michael Pradel
Published by
usenix.org
Topic
Other

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Cristian-Alexandru Staicu and Michael Pradel, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .