TrollThrottle —Raising the Cost of Astroturfing

Esiyok, Ilkan; Hanzlik, Lucjan; Künnemann, Robert; Budde, Lena Marie; Backes, Michael

doi:10.1007/978-3-030-57878-7_22

Cited by 2 publications

(2 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Some academic proposals for secure protocols implemented for browsers include TrollThrottle [1] and JavaScript Zero [2]; industry proposals include payment platforms such as Stripe and Square, chat protocols such as WhatsApp Web, Facebook Messenger and Matrix's Hydrogen client, encrypted cloud storage such as MEGA or SpiderOak. A concrete example is Nimiq, an entirely web-based digital currency managing private keys in the browser.…”

Section: Introductionmentioning

confidence: 99%

Accountable Javascript Code Delivery

Esiyok¹,

Berrang²,

Cohn-Gordon³

et al. 2023

Proceedings 2023 Network and Distributed System Security Symposium

View full text Add to dashboard Cite

The Internet is a major distribution platform for web applications, but there are no effective transparency and audit mechanisms in place for the web. Due to the ephemeral nature of web applications, a client visiting a website has no guarantee that the code it receives today is the same as yesterday, or the same as other visitors receive. Despite advances in web security, it is thus challenging to audit web applications before they are rendered in the browser. We propose Accountable JS, a browser extension and opt-in protocol for accountable delivery of active content on a web page. We prototype our protocol, formally model its security properties with the TAMARIN Prover, and evaluate its compatibility and performance impact with case studies including WhatsApp Web, AdSense and Nimiq.Accountability is beginning to be deployed at scale, with Meta's recent announcement of Code Verify available to all 2 billion WhatsApp users, but there has been little formal analysis of such protocols. We formally model Code Verify using the TAMARIN Prover and compare its properties to our Accountable JS protocol. We also compare Code Verify's and Accountable JS extension's performance impacts on WhatsApp Web.

show abstract

Section: Introductionmentioning

confidence: 99%

Accountable Javascript Code Delivery

Esiyok¹,

Berrang²,

Cohn-Gordon³

et al. 2023

Proceedings 2023 Network and Distributed System Security Symposium

View full text Add to dashboard Cite

show abstract

“…Nevertheless, for some websites, maintaining trust between developers and users is part of the business model: • a private email provider might wish to reassure users that it will always encrypt their messages, • a cryptocurrency wallet might wish to guarantee that it has no access to users' funds, or • a tracking pixel might wish to prove that it only receives data that is explicitly sent to it. Some academic proposals for secure protocols implemented for browsers include TrollThrottle [1] and JavaScript Zero [2]. Another concrete example is Nimiq, providing an entirely web-based digital currency valuated at $73M and managing private keys in the browser.…”

Section: Introductionmentioning

confidence: 99%

Accountable Javascript Code Delivery

Esiyok¹,

Robert²,

Berrang³

et al. 2022

Preprint

Self Cite

View full text Add to dashboard Cite

The Internet is a major distribution platform for applications, but there are no effective transparency and audit mechanisms. Due to the ephemeral nature of web applications, a client visiting a website has no guarantee that the code it receives today is the same as yesterday, or the same as others receive. Despite advances in web security, it is thus challenging to audit web applications before they are rendered in the browser. We propose Accountable JS, a browser extension and opt-in protocol for accountable delivery of active content on a web page. We prototype our protocol, formally model its security properties with the Tamarin Prover, and evaluate its compatibility and performance impact with case studies including WhatsApp Web, AdSense and Nimiq.

show abstract

TrollThrottle —Raising the Cost of Astroturfing

Cited by 2 publications

References 21 publications

Accountable Javascript Code Delivery

Accountable Javascript Code Delivery

Accountable Javascript Code Delivery

Contact Info

Product

Resources

About