Subject: [websec] Sniffly

From: Yoav Nir <[email-masked]>
Date: Mon, 2 Nov 2015 21:09:17 +0900

https://zyan.scripts.mit.edu/presentations/toorcon2015.pdf <https://zyan.scripts.mit.edu/presentations/toorcon2015.pdf> (presentation)
https://zyan.scripts.mit.edu/blog/sniffly/ <https://zyan.scripts.mit.edu/blog/sniffly/>  (blog)

This tool manages to track which sites a user has visited before by finding out if they have HSTS set for that site.  Pretty cool demonstration of how information can leak.

Yoav