The CSRF Resurrections - TIB AV-Portal

The CSRF Resurrections

00:00

8

Formal Metadata

Title

The CSRF Resurrections

Subtitle

Starring the Unholy Trinity: Service Worker of PWA, SameSite of HTTP Cookie, and Fetch

Title of Series

Number of Parts

85

Author

Contributors

N. N. (Moderation)

License

CC Attribution 3.0 Unported:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.

Identifiers

10.5446/62200 (DOI)

Publisher

Release Date

Language

Content Metadata

Subject Area

Computer Science

Genre

Conference/Talk

Abstract

CSRF is (really) dead. SameSite killed it. Browsers protect us. Lax by default! Sounds a bit too good to be true, doesn't it? We live in a world where browsers get constantly updated with brand new web features and new specifications. The complexity abyss is getting wider and deeper. How do we know web technologies always play perfectly nice with each other? What happens when something slips? In this talk, I focus on three intertwined web features: HTTP Cookie's SameSite attribute, PWA's Service Worker, and Fetch. I will start by taking a look at how each feature works in detail. Then, I will present how the three combined together allows CSRF to be resurrected, bypassing the SameSite's defense. Also, I will demonstrate how a web developer can easily introduce the vulnerability to their web apps when utilizing popular libraries. I will end the talk by sharing the complex disclosure timeline and the difficulty of patching the vulnerability due to the interconnected nature of web specifications.

Speech

Text

Image

00:00

Right angleWeb serviceTrailSet (mathematics)HTTP cookieService (economics)Computer animation

00:31

ResonanceGamma functionConvex hullCross-site scriptingWeb browserComputing platformHost Identity ProtocolHTTP cookieService (economics)MaizeInformation securityInformation privacyWebsiteWeb pageGEDCOMSoftware crackingComplex (psychology)Web 2.0HTTP cookieWebsiteInformation securityFocus (optics)Communications protocolData storage deviceClient (computing)MereologyAttribute grammarMechanism designState of matterData managementServer (computing)NumberInheritance (object-oriented programming)Cross-site scriptingTupleUniform resource locatorInternetworkingWeb browserError messageDatabaseSound effectDomain nameImage registrationNumbering schemeElectronic mailing listWeb pageInformation privacyLatent heatMultiplication signSet (mathematics)Expert systemWeb serviceEmailOperator (mathematics)Medical imagingSerial portNetwork socketMobile appMatching (graph theory)Domain nameComputing platformGroup actionStandard deviationEndliche ModelltheoriePower (physics)Service (economics)Probability density functionDependent and independent variablesLevel (video gaming)Web-DesignerComputer animation

07:35

EmailTime domainAddress spaceGrass (card game)HTTP cookieWebsiteGroup actionDynamic random-access memoryNormed vector spaceNumbering schemeConvex hullClique-widthoutputSession Initiation ProtocolGamma functionQueue (abstract data type)Host Identity ProtocolDebuggerDuality (mathematics)ResonanceAttribute grammarTupleDomain nameInformation securityWeb browserWebsiteLink (knot theory)Scripting languageMedical imagingNumbering schemeException handlingForm (programming)HTTP cookieCross-site scriptingObject (grammar)Uniform resource locatorSinc functionoutputAttribute grammarClient (computing)Address spaceServer (computing)Inheritance (object-oriented programming)Image registrationSemantics (computer science)Process (computing)Web pageComputer animation

14:39

HTTP cookieRun time (program lifecycle phase)Extension (kinesiology)Software developerWeb browserService (economics)Cache (computing)Data storage deviceSubject indexingComputer networkDigital filterFirefox <Programm>Time domainHypermediaVideoconferencingOnline helpMaxima and minimaUser-defined functionWeb pageLink (knot theory)Attribute grammarHTTP cookieEmailForm (programming)Web browserComputer animation

15:47

WebsiteHTTP cookieAttribute grammarEmailStrategy gameScripting languageEvent horizonDependent and independent variablesConvex hullCache (computing)Computer networkGoogle ChromeComputer-generated imageryDefault (computer science)Heat transferService (economics)Web applicationInteractive televisionAttribute grammarFunctional (mathematics)DataflowPerspective (visual)Web serviceDefault (computer science)Data storage deviceHTTP cookieArithmetic progressionLibrary (computing)MultilaterationObject (grammar)SoftwareStandard deviationThread (computing)Type theoryNumber1 (number)Web browserWeb 2.0Process (computing)Context awarenessIntercept theoremRoutingEvent horizonCache (computing)Uniform resource locatorServer (computing)Dependent and independent variablesStrategy gameMedical imagingSoftware developerOpen sourceWeb-DesignerProxy serverCore dumpGraphical user interfaceMatching (graph theory)Web pageCASE <Informatik>TwitterForm (programming)Social classCodeComputer animation

22:08

Heat transferScripting languageService (economics)HTTP cookieStandard deviationThomas KuhnNumbering schemeDependent and independent variablesMathematicsEvent horizonIntercept theoremComputer networkoutputContext awarenessEmailClient (computing)Electric currentCache (computing)AlgorithmData managementHost Identity ProtocolMechanism designTablet computerInstance (computer science)WebsiteTime domainLimit (category theory)Group actionSynchronizationHyperlinkHTTP cookieWeb browser2 (number)EmailMedical imagingContext awarenessResultantString (computer science)WebsiteCache (computing)AlgorithmMobile appConstructor (object-oriented programming)Sheaf (mathematics)Numbering schemeClient (computing)Subject indexingWeb serviceWordEvent horizonSystem callCodeParameter (computer programming)Dependent and independent variablesFlow separationDemosceneInitial value problemCollaborationismObject (grammar)Line (geometry)outputElement (mathematics)Server (computing)Free variables and bound variablesCategory of beingSoftware testingFlagPoint (geometry)BitLatent heatWeb pageDomain nameRight angleForm (programming)Link (knot theory)Multiplication signService (economics)Instance (computer science)Computer animation

28:24

Web browserHTTP cookieExtension (kinesiology)Service (economics)TunisVideoconferencingCache (computing)Data storage deviceSubject indexingComputer networkFirefox <Programm>Computer clusterSoftware developerEvent horizonMaxima and minimaDigital filterRun time (program lifecycle phase)HypermediaView (database)Similarity (geometry)Web pageWeb browserEvent horizonHTTP cookieForm (programming)WebsiteCodeWeb service1 (number)NumberComputer clusterComputer animation

29:46

VideoconferencingLine (geometry)Computer networkSynchronizationEvent horizonHyperlinkGroup actionResonanceScripting languageDependent and independent variables8 (number)Cache (computing)Computer-generated imageryHeat transferDefault (computer science)NumberSoftwareSoftware developerLink (knot theory)Form (programming)Medical imagingWeb serviceHeat transferComputer animation

30:16

HTTP cookieAuthorizationService (economics)Extension (kinesiology)Firefox <Programm>HypermediaVideoconferencingView (database)Limit (category theory)Data storage deviceCache (computing)Subject indexingComputer networkVideo game consoleComputer wormSoftware developerHeat transferDigital filterError messageProbability density functionThread (computing)Run time (program lifecycle phase)Computer-generated imageryDebuggerSource codeDefault (computer science)Web pageLoginForm (programming)CodeHTTP cookieEvent horizonWeb serviceLink (knot theory)Functional (mathematics)WebsiteCross-site scriptingComputer animation

31:23

View (database)VideoconferencingDefault (computer science)CodeComputer-generated imageryHyperlinkHeat transferGroup actionCache (computing)Scripting languageDependent and independent variablesHTTP cookieComputer wormService (economics)Web serviceDefault (computer science)LogicHeat transferSet (mathematics)NumberSoftwareForm (programming)Web pageComputer animation

32:22

Computer wormMaxima and minimaExtension (kinesiology)Service (economics)VideoconferencingView (database)Cache (computing)Data storage deviceHTTP cookieSubject indexingSoftware developerComputer networkAuthorizationLaceHypermediaDemo (music)Heat transferHyperlinkGroup actionScripting languageMeta elementEvent horizonRun time (program lifecycle phase)Digital filterLoginComputer-generated imageryFirefox <Programm>Mobile appLink (knot theory)Medical imagingWeb serviceHTTP cookieWeb pageWebsiteLoginComputer animation

33:22

View (database)CodeGamma functionWeb pageInformationComputer networkPerformance appraisalService (economics)HTTP cookieVideoconferencingExtension (kinesiology)Firefox <Programm>Software developerWeb browserData storage deviceHypermediaComputer-generated imageryState of matterTime domainData typeComputer fileContent (media)LengthRevision controlEmailZeitdilatationDemo (music)Dependent and independent variablesInformation securityBlock (periodic table)Digital filterNormed vector spaceFormal languageWeb serviceSoftwareDemo (music)Multiplication signClient (computing)Software developerHTTP cookieRight angleKeyboard shortcutPatch (Unix)Computer animation

34:20

Computer fileView (database)CodeInformation securitySerial portPatch (Unix)Extension (kinesiology)WebsiteHTTP cookieContext awarenessoutputPatch (Unix)Software bugEmailInformation securityFrame problemLattice (order)Flow separationDifferent (Kate Ryan album)Partition (number theory)InformationWeb serviceData storage deviceHTTP cookieClient (computing)Traffic reportingLatent heatRevision controlWebsiteCASE <Informatik>Software developerServer (computing)Graphical user interfaceGoogolLogicComputer animation

37:18

Digital filterExtension (kinesiology)Service (economics)Firefox <Programm>AuthorizationLoginHTTP cookieCache (computing)Data storage deviceComputer networkSoftware developerRun time (program lifecycle phase)Event horizonView (database)Time domainFrame problemAttribute grammarDefault (computer science)Server (computing)HTTP cookieWeb serviceData storage deviceCross-site scriptingAttribute grammarAdditionFrame problemInteractive televisionWeb browserLevel (video gaming)FeedbackVector spaceTheory of relativityWeb 2.0DataflowMechanism designCodeCache (computing)Default (computer science)Software developerComplex (psychology)SoftwareLatent heatPartition (number theory)Server (computing)WebsiteDivisorSet (mathematics)Revision controlDoubling the cubeComputer animation

Transcript: English(auto-generated)