Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This solution is just begging for side-channel attacks.

Firefox had better make sure its timing is not affected by such shenanigans, for instance.



I doubt that is avoidable, as the browser would still probably need to render at the false viewport dimensions. For a common adversary, fingerprinting based on timing would be more involved and less useful.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: