Pixel Perfect Timing Attacks with HTML5

Explore cutting-edge techniques for JavaScript-based timing attacks to extract sensitive data from web browsers in this 52-minute Black Hat USA 2013 conference talk. Delve into the unexpected security and privacy threats arising from subtle interactions between new HTML5 browser features. Discover cross-browser vulnerabilities affecting Chrome, Internet Explorer, and Firefox that can compromise browsing history and logged-in website data. Examine the challenges of fixing these vulnerabilities and learn about innovative concepts such as CSS history sniffing, requestAnimation Frame, SVG filter effects, and pixel-perfect OCR. Gain insights into browser black boxes, page request timing, and the complexities of addressing timing attacks in modern web browsers.

Intro
Browser Black Boxes
Page Request Timing
Timing Attack Problems
CSS History Sniffing
requestAnimation Frame
Detecting Repaints
SVG Filter Effects
SVG Timing Attack Filter
Pixel-Perfect OCR
Fixing Timing Attacks