Skip to content

Commit 62b0ae8

Browse files
mr-mediterjanq
andauthored
Update cross-site frame counting real world example section with a new patched bug on GitHub (#152)
* Update frame-counting.md * Update frame-counting.md * Update contributors _index.md file --------- Co-authored-by: terjanq <[email protected]>
1 parent ca0b2a9 commit 62b0ae8

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

content/docs/attacks/frame-counting.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,9 @@ Some examples of frame counting attacks are:
7777

7878
A vulnerability reported to Facebook used this technique to leak user-related information such as specific content published in posts, religious information about friends, or photo locations[^1].
7979

80+
A vulnerability on GitHub demonstrates how private repositories could have been exposed using this technique as well.[^2].
81+
8082
## References
8183

8284
[^1]: Patched Facebook Vulnerability Could Have Exposed Private Information About You and Your Friends. [link](https://www.imperva.com/blog/facebook-privacy-bug/)
85+
[^2]: How Cross-Site Frame Counting Exposes Private Repositories on GitHub. [link](https://mr-medi.github.io/research/2023/07/31/exploring-cross-site-frame-counting-attacks.html)

content/docs/contributions/_index.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,8 @@ We would like to thank the following users who [contributed](https://github.com/
8888
[NDevTK](https://github.com/NDevTK), [1lastBr3ath](https://twitter.com/1lastBr3ath),
8989
[Brasco](https://github.com/Brasco/), [rick.titor](https://github.com/riccardomerlano),
9090
[Chris Fredrickson](https://github.com/cfredric/), [jub0bs](https://github.com/jub0bs),
91-
[Zeyu (Zayne) Zhang](https://github.com/zeyu2001), [Aaron Shim](https://github.com/aaronshim),
91+
[Zeyu (Zayne) Zhang](https://github.com/zeyu2001), [Medi](https://twitter.com/medi_0ne),
92+
[Aaron Shim](https://github.com/aaronshim)
9293

9394
In addition, we would also like to acknowledge the users who [contributed](https://github.com/xsleaks/xsleaks/wiki/Browser-Side-Channels/_history) to the predecessor of the current XS-Leaks wiki:
9495

0 commit comments

Comments
 (0)