Mac Tales

It’s not uncommon to find attacks used by web-savvy criminals which exploit the ability to traverse the users history / cache using JavaScript.

This technique can be used to track user behavior, but just as easily can be used in a more targeted way to identify which banking sites or web mail a user has visited.

These browser privacy attacks are mostly preventable by logically partitioning the history and cache by domain name; so called same origin policy.

The simplest way to do this in firefox is using the SafeCache and SafeHistory browser extensions.