About

Latest cross-site leak (XS-Leak) news

Cross-site leak (XS-Leak) refers to a family of browser side-channel techniques that can be used to infer and gather information about users, often based upon network timing of the responses.

XS-Leak attacks attempt to circumvent web security controls by analyzing response times and other factors in order to infer user data.

While the deanonymization capabilities of XS-Leak attacks are only just being realized, some researchers have said the technique will soon be in the OWASP Top 10.