Post Syndicated from Unknown original https://lcamtuf.blogspot.com/2014/06/boolean-algebra-with-css-when-you-can.html

Depending on how you look at it, CSS can be considered Turing-complete. But in one privacy-relevant setting – when styling :visited links – the set of CSS directives you can use is extremely limited, effectively letting you control not much more than the color of the text nested between <a href=…> and </a>. Can you perform any computations with that?

Well, as it turns out, you can – in a way. Check out this short write-up for a discussion on how to implement Boolean algebra by exploiting an interesting implementation-level artifact of CSS blending to steal your browsing history a bit more efficiently than before.

Vulnerability logo and vanity domain forthcoming – stay tuned.