The attack
takes advantage of the HTML5 battery
status API,
which allows servers to determine when they need to send energy efficient version of a website , It lets them see how much charge a laptop, tablet or smart phone has in terms of time remaining until discharge and as an overall percentage.
which allows servers to determine when they need to send energy efficient version of a website , It lets them see how much charge a laptop, tablet or smart phone has in terms of time remaining until discharge and as an overall percentage.
The researchers
have determined that these two figures can be combined to provide a semi-unique
identifier which can be used to track devices between the website you visit.
It is reported that it is had to prevent this attack, You
can''t deal with it as easily as you would wipe out a browser cookies. VPN's and
Adblocks wont help either , it would only be to plug the device to power supply.
For some time now, security community have held some concerns about the
battery status API.
Uber announced that it has been monitoring the battery life of
users and had observed that users where
far more willing to pay for surge pricing when their phones are close to dying.
For more on this, visit thenextweb.com
No comments:
Post a Comment