Beauty and the Burst: Remote Identification of Encrypted Video Streams

It is demonstrated that this attack can be performed even by a Web attacker who does not directly observe the stream, e.g., a JavaScript ad confined in a Web browser on a nearby machine.