Hacker News Reader

Parent Full thread

worthless-trash

IIRC you can use the android shared webview to determine if a site is in cache on the system by measuring access times.

View on HN

Sounds similar to a timing attack[0]

0. https://en.wikipedia.org/wiki/Timing_attack

Very similar... Inferring data through response time.

Do you not get access to the response code as well? That would be simpler.

off the top of my head, the response code from cache is simply 200 OK, is it not?

Interesting, I just looked and certainly in FF it now is. I have a distinct memory of locally cached files returning a 3xx in the past, though.

I think that would happen in combination with the remote server replying "304 Not Modified"

Now that you mentioned it tho, I'm not sure whether developer tools is showing me the ground truth, how does it give me 200 OK from cache without asking the remote whether the resource has changed? My memory agrees with you, something has changed in the matrix.

Reply on news.ycombinator.com