Timing Attacks Have Never Been So Practical - Advanced Cross-Site Search Attacks
Explore advanced cross-site search (XS-search) attacks in this Black Hat conference talk. Delve into practical timing side-channel attacks that extract sensitive information from web services using response inflation techniques. Learn about browser-based XS-search attacks on Gmail and Facebook, and discover algorithmic improvements for enhanced efficiency. Examine the novel second-order (SO) XS-search attack, which allows attackers to significantly increase response size differences by planting maliciously crafted records. Understand how these attacks can compromise email content on Gmail and Yahoo!, as well as search history on Bing. Follow the attack flow, challenges, and defense strategies through real-world examples and demonstrations. Gain insights into the limitations of these attacks and potential countermeasures to protect web services from such vulnerabilities.