#dev 2023-01-12

2023-01-12 UTC

[tantek] there are timing attacks you can do to see if a browser has loaded a resource or not, and if you can find a specific resource that is indicative of a signed-in state on a specific site, well there you go