
Theme Zoom Architect Sue Bell recently lectured the Theme Zoom team on “history sniffing” and we thought to bring this to the attention of our readers, since it is definitely not something everyone knows about.
The original article that brought this topic to light was called Your Web Surfing History Is Accessible (Without Your Permission) Via JavaScript.
The meat of the article is summarized:
History sniffing takes place without your knowledge or permission and relies on the fact that browsers display links to sites you’ve visited differently than ones you haven’t: by default, visited links are purple, unvisited links blue. History sniffing JavaScript code running on a Web page checks to see if your browser displays links to specific URLs as blue or purple.
More disturbing for those of us who perform a lot of online commerce:
History sniffing can be used by website owners to learn which competitor sites visitors have or have not been to. History sniffing can also be deployed by advertising companies looking to build user profiles, or by online criminals collecting information for future phishing attacks. Learning what banking site you visit, for example, suggests which fake banking page to serve up during a phishing attack aimed at collecting your bank account login information.
Sue Bell suggested that all TZ team members stick with the latest version of Mozilla Firefox, Chrome or Safari because the updated versions of each browser now block the history sniffing attacks during tests. She also recommends that you make sure that your latest version is updated with recent recommended patch from each company.
I have to say, Sue Bell has a special interest in this topic because she was messing around with fairly heavy concepts that would allow websites to utilize such technology. (That is all I can really say about it). She pretty much ‘sees the matrix’ if you know what I mean, and is always looking for security holes where data could be extracted . . . yeah, like Inception. (grin)
Thank you Sue, updates in progress.
Guys, this means that the big “E” browser (Explorer) is not recommended until they actively address this problem!



Great Article by one of your experts, Sue. Thanks for posting RW..will definitely share on FBK.
Thanks for being the good guys of Phishing Attack marketing black marketing identity theft.
You rock!!!
Thanks guys.