Cross-origin pixel stealing: Timing attacks using CSS filters

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2013, Pages 1055-1062

  Kotcher, Robert ^a   Pei, Yutong ^a   Jumde, Pranjal ^a   Jackson, Collin ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

css filters; css shaders; opengl es; privacy; timing attacks

Indexed keywords

BOOLEAN VALUES; CSS-FILTERS; CSS-SHADERS; DOM TREE; INPUT SIZE; INPUT VALUES; TIMING ATTACKS; USER HISTORY;

APPLICATION PROGRAMMING INTERFACES (API); DATA PRIVACY; PIXELS;

SECURITY OF DATA;

EID: 84889014267     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2508859.2516712     Document Type: Conference Paper

References (22)

1. Adobe. Css shaders. http://www.adobe.com/devnet/html5/articles/css- shaders.html.
2. A. Barth. Adam barth's proposal. http://www.schemehostport.com/2011/12/ timing-attacks-on-css-shaders.html.
3. A. Barth, C. Jackson, C. Reis, and T. Team. The security architecture of the chromium browser, 2008.
4. A. Bortz and D. Boneh. Exposing private information by timing web applications. In Proceedings of the 16th international conference on World Wide Web, pages 621-628. ACM, 2007.
5. Chromium. Gpu command buffer. http://www.chromium.org/developers/design- documents/gpu-command-buffer.
6. Chromium. Graphics and skia. http://www.chromium.org/developers/design- documents/graphics-and-skia.
7. CMU. Spatial data structures. http://www.cs.cmu.edu/afs/cs/academic/ class/15462-f12/www/lec-slides/lec13.pdf.
8. R. Crawfis. Mozilla window.requestanimationframe. https://developer. mozilla.org/en-US/docs/DOM/window.requestAnimationFrame.
9. A. Deveria. Can i use css filter effects? http://caniuse.com/css-filters.
10. E. W. Felten and M. A. Schneider. Timing attacks on web privacy. In Proceedings of the 7th ACM conference on Computer and communications security, pages 25-32. ACM, 2000.
11. HTML5Rocks. Catch-all for html5 rocks website. http://updates.html5rocks. com.
12. R. Hudea, R. Cabanier, and V. Hardy. enriching the web with css filters.
13. C. Jackson, A. Bortz, D. Boneh, and J. C. Mitchell. Protecting browser state from web privacy attacks. In Proceedings of the 15th international conference on World Wide Web, pages 737-744. ACM, 2006.
14. P. C. Kocher. Timing attacks on implementations of diffie-hellman, rsa, dss, and other systems. In Advances in Cryptology - CRYPTO'96, pages 104-113. Springer, 1996.
15. V. Kokkevis. Gpu accelerated compositing in chrome. http://www.chromium. org/developers/design-documents/gpu-accelerated-compositing-in-chrome.
16. I. LiTH. Painter's algorithm. http://www.computer-graphics.se/TSBK07- files/PDF12/6b.pdf.
17. P. Stone. Pixel perfect timing attacks with html5. http://www.contextis. com/files/Browser-Timing-Attacks.pdf.
18. W3. Css shader proposal. https://dvcs.w3.org/hg/FXTF/raw-file/tip/custom/ index.html.
19. W3. Shader security. http://www.w3.org/Graphics/fx/wiki/CSS-Shaders- Security.
20. Webkit. Accelerated rendering and compositing. http://trac.webkit.org/ wiki/Accelerated%20rendering%20and%20compositing.
21. Z. Weinberg, E. Y. Chen, P. R. Jayaraman, and C. Jackson. I still know what you visited last summer: Leaking browsing history via user interaction and side channel attacks. In Security and Privacy (SP), 2011 IEEE Symposium on, pages 147-161. IEEE, 2011.
22. S. White. Accelerated css filters landed in chromium. http://blog.chromium.org/2012/06/accelerated-css-filters-landed-in.html.