Why does this website exist?
This project was started by a small group of Web developers and security researchers in order to highlight the problem of Web browser history detection -- a problem which can dramatically affect the Web and hurt many people, if not solved quickly. Our direct goal is to educate the mainstream public and show them the direct consequences of allowing this aspect of Web browser behavior, as well as provide some solutions which mitigate the problem. However, since there are no existing satisfactory solutions, our other objective is to point the attention of browser developers to this issue and strongly encourage them to implement the necessary and long-overdue fixes.
We are aware of several other projects demonstrating the feasibility of inspecting the browser's cache (see the references section). The problem with the existing demos is that, while most of them correctly detect some links in your history, they usually only show a small number of pages and display them as a messy list, without any meaning. When approaching this project, we set out to do it in the way that the bad guys would do it -- by gathering links to answer specific questions about you and grouping them, to give you a taste of what any website can easily learn about you. Another important aspect was the optimization of the detection process, to see how far we can push the envelope in terms of both checking and sending the links to each client's browser and have a realistic view of the ramifications when this attack is used in the wild. Thus, a first fully-loaded demonstration of contextual Web browser history detection is presented.
Contact
If you have any comments or questions which are not answered in our FAQ, you're welcome to email us at: wtikay@hush.ai