New browser exploit tracks even the most paranoid web users

have i been pwned owner uncovers 13 million plaintext passwords leaked from free webhost is a safe password even possible we
guteksk7/Shutterstock
When it comes to tracking your web browsing, webmaster have all sorts of options – many of which web users actively block. But what if a malicious website owner could turn security features against you?

A researcher proved it’s possible to do just that over the weekend.

Most web users are aware that sites use can use cookies or browser fingerprinting to track you – it’s why so many users make a habit of deleting cookies, scrambling their user agents, and taking advantage of Incognito Mode.

But in a presentation over the weekend security researcher Yan Zhu showed the world a new tracking method that gets around even the most paranoid user, by exploiting the certificates your browser uses to connect to secure sites.

Don’t believe me? Try Zhu’s site Sniffly out for yourself in Chrome or Firefox, and you’ll probably end up with an accurate list of sites you have and haven’t visited.

To (dramatically) simplify what’s going on here, the exploit attempts to load various images from encrypted domains, then detects whether or not your browser can establish a secure connection with those sites. If it can connect, it’s because you have an  HSTS pin for the site – so there’s a good chance you’ve visited the site before.

It’s a simple way to get a quick list of which secure sites you have and haven’t visited. The information collected this way is less reliable, only relates to sites encrypted using HTTPS, and is less specific that other methods – the sites you’ve visited are revealed, not the individual pages. But it’s still noteworthy, because nothing like it’s been done before.

You can watch Zhu’s entire presentation, read the slides or check out Sniffly on GitHub, if you want a more complete breakdown of how the exploit works.

Emerging Tech

The grid of the future will be powered by … giant subterranean bagpipes?

In order to transition to a more renewable-focused energy system, we need to scale up our grid storage capacity --- and our existing methods aren't going to cut it. Could compressed air be the key?
Mobile

Google Creative Lab’s new AR experiment helps you learn how to draw

Google's Creative Lab developed an experiment called Drawalong AR that could make it easier for aspiring artists to follow YouTube tutorials. The experiment essentially leverages Google's ARCore to create a virtual tracing paper.
Gaming

This list of PlayStation 4 exclusives puts its competitors to shame

The PlayStation 4's game library and incredible selection of exclusive games could make anyone with an Xbox One or Nintendo Switch think twice. Here's our list of the latest and greatest PS4 exclusives.
Product Review

Now that every speaker has Alexa, don't you want the best? Get the Sonos One

To compete in the smart speaker space, Sonos could have just made a better-sounding Alexa speaker. But the company has a reputation to uphold, and went much further. Our Sonos One Review reveals how Sonos does Alexa better than Amazon.
Cars

Nvidia agrees with Tesla’s take on self-driving cars, but corrects specifics

Nvidia vice president Rob Csongor agreed with broad statements by Elon Musk at Tesla's April 22 Autonomy Investor Day. Csongor then took exception to what he termed were inaccuracies about Nvidia's self-driving car chip.
Product Review

Still waiting for a new Mac Pro? Corsair’s mini PC has all the power you'll need

With a modern 12-core Intel Core i9-9920X processor, Nvidia’s RTX 2080 Ti graphics, and 32GB of RAM, the Corsair One Pro is designed to woo creatives who demand more power from Apple’s Mac Pro. Like the Mac Pro, the best part of this PC…
Computing

Amal and George Clooney want to change the world. Can Microsoft help?

Microsoft and The Clooney Foundation for Justice (CFJ) unveiled the TrialWatch app Thursday morning, a new tool in CFJ’s ongoing TrialWatch effort to shine a light on injustice in courts around the globe – which too often are simply…
Computing

Tablet or notebook? Our favorite 2-in-1 PCs give you the best of both worlds

If you can’t decide if you need a tablet or a notebook, then don’t bother. The best 2-in-1 laptops are both, and they can provide all the power you need. Check out our list for the best 2-in-1s for any user.
Computing

These are the best 13-inch laptops you can buy right now

With so much choice out there, how do you know which are the best 13-inch laptops? They should have beautiful screens, long battery life, and remain light and portable. This is a list of our favorites.
Computing

These gaming monitors will transport you to another dimension

What are the best gaming monitors you can buy right now? We select five that are all priced under $900 packing premium technologies like G-SYNC and FreeSync, high resolutions, and fast refresh rates.
Photography

Luminar Accent A.I. can now recognize faces for more natural instant edits

Want to edit faster? Skylum Luminar's latest update enhances the Accent A.I. to use machine learning for instant enhancements. The tool now recognizes faces for more natural skin tones along with other enhancements.
Computing

Intel’s 10nm desktop dreams may be dead — new road map pushes them beyond 2022

Intel may never release a competitive 10nm CPU on desktop if a new roadmap is to be believed. It suggests that Intel will rely on its 14nm process to at least 2022 and perhaps even beyond.
Computing

Turn your desk into a command center with the best ultrawide monitors

Top of the line ultrawide monitors have the deepest curves, the sharpest colors, and the biggest screens on the market. You’re going to want one, sooner or later. So why not sooner? These are the best ultrawide monitors you can buy now.
Computing

Corsair’s Ironclaw, Glaive gaming mice are tuned for performance and comfort

Corsair is adding wireless capabilities to its Ironclaw gaming mouse this year, while the Glaive RGB Pro has been updated for maximum comfort with thoughtful ergonomics. Both mice feature accurate tracking and durable buttons.