VagoSec

At the Black Hat USA 2016 conference, we presented “HEIST”. In a nutshell, HEIST is a set of techniques that exploit timing side-channels in the browser to determine the exact size of an authenticated cross-origin response. These side-channels allow an adversary to determine whether a response fitted into a single TCP…

Popular posts: 1
Total points: 353
HN comments: 94
Rank: #3,774 company

Visit vagosec.org → RSS feedOn Hacker News Sep 2013 – Sep 2013

Security & Privacy 1 Networking & Internet 1

Most points Most discussed Most cited Newest

Why you should not trust emails sent from Google

2013353 points94 comments Security & Privacy details

As you might know, Google is running a vulnerability reward program , where they award researchers monetary awards or a place in their Hall of Fame when they responsibly disclose vulnerabilities. With this in mind, I was scooping around on several Google services, including Google Scholar. As I recently started a PhD…