Beauty at a Cost: Privacy Implications of CSS on the Web and in Emails
summary
Explores how CSS can be abused for cross-site and email-based tracking and profiling without cookies or JavaScript, showing concrete privacy risks in modern browser engines and HTML email clients. Discusses CSS-based fingerprinting techniques as a vector for tracking, targeted phishing, and spam, and highlights gaps in current JavaScript-focused mitigations.
AI-written summary · about
related talks
14mBrowser Fingerprinting: Stalking With a Personal Touch
30mXSS. (No, the _other_ "S")
46m3.14 things I didn’t know about CSS
33mHacking The Front-End
55mWeb Application Security: Browsers Fight Back!
40mInteractive Email
41m3.14 things I didn't know about CSS
40mStealing With Style: Using CSS to Exploit ProtonMail & Friends