Cascading Spy Sheets: Exploiting Modern CSS for Fingerprinting
2025-01-10
Researchers discovered that modern CSS's dynamic features, even with JavaScript disabled, enable fingerprinting in both browsers and emails. Three techniques leveraging container queries, arithmetic functions, and complex selectors achieve high accuracy in inferring application, OS, and hardware configurations. This fingerprinting works even in the restrictive environment of HTML emails. The researchers propose two defenses: browser resource preloading and an email proxy service.
Read more
(cispa.de)
Tech