<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Noscript HScan</title>
	<atom:link href="http://www.gnucitizen.org/blog/noscript-hscan/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.gnucitizen.org/blog/noscript-hscan/</link>
	<description>Information Security Think Tank</description>
	<lastBuildDate>Thu, 11 Mar 2010 22:49:16 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-125875</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Sun, 08 Feb 2009 17:47:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-125875</guid>
		<description>and now you can download the code.</description>
		<content:encoded><![CDATA[<p>and now you can download the code.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: The Spanner - CSS LAN scanner</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-42972</link>
		<dc:creator>The Spanner - CSS LAN scanner</dc:creator>
		<pubDate>Fri, 24 Aug 2007 17:35:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-42972</guid>
		<description>[...] some more CSS scanners that I&#8217;ve been told about:- RSnake&#8217;s CSS scanner PDP&#8217;s noscript scanner Jeremiah Grossman&#8217;s CSS History hack   Share and Enjoy: These icons link to social [...]</description>
		<content:encoded><![CDATA[<p>[...] some more CSS scanners that I&#8217;ve been told about:- RSnake&#8217;s CSS scanner PDP&#8217;s noscript scanner Jeremiah Grossman&#8217;s CSS History hack   Share and Enjoy: These icons link to social [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: &#187; Historial de navegación público &#124; Inform&#225;tica Pr&#225;ctica &#124;</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-40041</link>
		<dc:creator>&#187; Historial de navegación público &#124; Inform&#225;tica Pr&#225;ctica &#124;</dc:creator>
		<pubDate>Sat, 11 Aug 2007 10:46:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-40041</guid>
		<description>[...] tanto en Internet Explorer, como en Firefox,Konqueror y Safari. Está disponible ya incluso un scáner configurable [...]</description>
		<content:encoded><![CDATA[<p>[...] tanto en Internet Explorer, como en Firefox,Konqueror y Safari. Está disponible ya incluso un scáner configurable [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-27205</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Wed, 06 Jun 2007 18:54:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-27205</guid>
		<description>Visited sites will show up as pink Vs while not visted sites will show up as simle blue Vs. See the generated CSS for more information how it works.</description>
		<content:encoded><![CDATA[<p>Visited sites will show up as pink Vs while not visted sites will show up as simle blue Vs. See the generated CSS for more information how it works.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Franck</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-26911</link>
		<dc:creator>Franck</dc:creator>
		<pubDate>Wed, 06 Jun 2007 00:37:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-26911</guid>
		<description>Doesnt work here. Not in IE neither FF. I am seeing &#039;v&#039; characters as output. This is supposed to mean &#039;visited&#039;? But I never visit those sites. Even a fake url shows up as &#039;v&#039;. So I don&#039;t get this..</description>
		<content:encoded><![CDATA[<p>Doesnt work here. Not in IE neither FF. I am seeing &#8216;v&#8217; characters as output. This is supposed to mean &#8216;visited&#8217;? But I never visit those sites. Even a fake url shows up as &#8216;v&#8217;. So I don&#8217;t get this..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: &#187; Blog Archive &#187; Historial de navegación público</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-6834</link>
		<dc:creator>&#187; Blog Archive &#187; Historial de navegación público</dc:creator>
		<pubDate>Wed, 14 Mar 2007 21:27:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-6834</guid>
		<description>[...] Según he leígo en un blog cuya noticia salió publicada en meneame.net, es posible comprobar las páginas web que un usuario ha visitado. Jeremiah Grossman demostró que ésta información es accesible gracias a un Javascript. Pero ya ni siquiera es necesario recurrir a Javascript, ya que con cierta &#8220;lógica&#8221; CSS es posible conseguir lo mismo, y funciona tanto en Internet Explorer, como en Firefox,Konqueror y Safari. Está disponible ya incluso un scáner configurable on-line. [...]</description>
		<content:encoded><![CDATA[<p>[...] Según he leígo en un blog cuya noticia salió publicada en meneame.net, es posible comprobar las páginas web que un usuario ha visitado. Jeremiah Grossman demostró que ésta información es accesible gracias a un Javascript. Pero ya ni siquiera es necesario recurrir a Javascript, ya que con cierta &#8220;lógica&#8221; CSS es posible conseguir lo mismo, y funciona tanto en Internet Explorer, como en Firefox,Konqueror y Safari. Está disponible ya incluso un scáner configurable on-line. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-5658</link>
		<dc:creator>Joe</dc:creator>
		<pubDate>Thu, 01 Mar 2007 21:35:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-5658</guid>
		<description>nice tool, thank you</description>
		<content:encoded><![CDATA[<p>nice tool, thank you</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tu Historial de navegación con el culo al aire xD &#171; Un poco de mucho</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-5655</link>
		<dc:creator>Tu Historial de navegación con el culo al aire xD &#171; Un poco de mucho</dc:creator>
		<pubDate>Thu, 01 Mar 2007 20:39:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-5655</guid>
		<description>[...] Ya hay disponible un escáner configurable on-line. (en inglés pero deducible fácilmente) [...]</description>
		<content:encoded><![CDATA[<p>[...] Ya hay disponible un escáner configurable on-line. (en inglés pero deducible fácilmente) [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: GNUCITIZEN &#187; PDF and History Hacks</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-5643</link>
		<dc:creator>GNUCITIZEN &#187; PDF and History Hacks</dc:creator>
		<pubDate>Thu, 01 Mar 2007 14:49:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-5643</guid>
		<description>[...] I couple of days latter, RSnake published his own History scanning technique which does not use JavaScript at all. Neat! This technique makes use of Jeremiah Grossman&#8217;s methodology plus a conditional CSS trick to reveal links that has been visited. Although, Firefox users who have the SafeHistory extension installed are secured against this type of attack, RSnake&#8217;s implementation is the lightest approach I have seen so far. I decide to improve upon his POC and construct a generic NoScript History Scanner which you can read about it here. [...]</description>
		<content:encoded><![CDATA[<p>[...] I couple of days latter, RSnake published his own History scanning technique which does not use JavaScript at all. Neat! This technique makes use of Jeremiah Grossman&#8217;s methodology plus a conditional CSS trick to reveal links that has been visited. Although, Firefox users who have the SafeHistory extension installed are secured against this type of attack, RSnake&#8217;s implementation is the lightest approach I have seen so far. I decide to improve upon his POC and construct a generic NoScript History Scanner which you can read about it here. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: The show must go on - Part 2 at Disenchant&#8217;s Blog</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-5640</link>
		<dc:creator>The show must go on - Part 2 at Disenchant&#8217;s Blog</dc:creator>
		<pubDate>Thu, 01 Mar 2007 13:21:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-5640</guid>
		<description>[...] For the guys (and of course girls  ) of you who like to try out that stuff and don&#8217;t want to write their own code, you can use the Noscript HScan builder written by pdp. [...]</description>
		<content:encoded><![CDATA[<p>[...] For the guys (and of course girls  ) of you who like to try out that stuff and don&#8217;t want to write their own code, you can use the Noscript HScan builder written by pdp. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-5633</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Thu, 01 Mar 2007 09:40:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-5633</guid>
		<description>That&#039;s the purpose of it. You can use it straight from here... no need to download.</description>
		<content:encoded><![CDATA[<p>That&#8217;s the purpose of it. You can use it straight from here&#8230; no need to download.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: anonymous</title>
		<link>http://www.gnucitizen.org/blog/noscript-hscan/comment-page-1/#comment-5632</link>
		<dc:creator>anonymous</dc:creator>
		<pubDate>Thu, 01 Mar 2007 09:38:43 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/noscript-hscan#comment-5632</guid>
		<description>The PHP download unfortunately gets parsed thus we can get the output, but not the download. You&#039;ll have to change the extension ot pack it into a TAR/ZIP file if you want people to download it.

Thanks a lot!</description>
		<content:encoded><![CDATA[<p>The PHP download unfortunately gets parsed thus we can get the output, but not the download. You&#8217;ll have to change the extension ot pack it into a TAR/ZIP file if you want people to download it.</p>
<p>Thanks a lot!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
