Stealing browser history without JavaScript

Zinco zinco at
Sun Jun 14 15:26:27 UTC 2009

-----Original Message-----
From: owner-or-talk at [mailto:owner-or-talk at] On
Behalf Of Anon Mus
Sent: Sunday, June 14, 2009 8:09 AM
To: or-talk at
Subject: Re: Stealing browser history without JavaScript

Matej Kovacic wrote:
> Hi,
> this seems an interesting issue:
> bye, Matej
Been to this site and it dont work on my firefox.3.0.8 browser... (with 
NoScript, QuickJava, Better Privacy, JavaScript Deobfuscator, Quick 
Preference Button & User Agent Switcher)

it replies with a 0 (zero) count. But there should be dozens.

Seems to me it would have to have all websites known to man on the page it
loads.  If it looks at "visited links" css on the page it loads it could
only look at websites on that page.  It would have to store a lot of web
pages on that hidden i-frame to really compare.  Unless you are looking to
see if a particular person visited a particular page doesn't seem like it
would do anyone much good.

More information about the tor-talk mailing list