Announcing SnailLoad, the first fully remote website- and video-fingerprinting attack working via arbitrary TCP connections.
SnailLoad does not require any attacker code on the victim machine, any TCP connection is enough.

Great collaboration with Roland Czerny, Jonas Juffinger, Fabian Rauscher, @silent_bits and @lavados.

See the website for the full paper and a live demo: https://www.snailload.com
(1/3)

#SnailLoad #sidechannel #networksecurity

SnailLoad: Exploiting Remote Network Latency Measurements without JavaScript

And, for the demo we also created a video: https://www.youtube.com/watch?v=oQpbSbeAJ2I
c0de - SnailLoad (A Parody Song)

YouTube
@notbobbytables Cool, I didn't know the paper was already out. Congratulations on the awesome research!
@GEBIRGE Thank you! Yes, we just released it yesterday, so it's still quite recent. 🙂