I just read the paper "Master of Web Puppets: Abusing Web Browsers for Persistent and Stealthy Computation".

The authors claim to use the SyncManager Interface in order to keep Service Workers alive forever and thus turning the victim's browser into a slave.

Is that really possible? I thought the sync process was always initiated by the client and there was no way for a server to force synchronization.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.