Just stumbled upon a Slashdot discussion Your Browser History Is Showing, interesting stuff, it turns out there are two known techniques to sniff your web browser history remotely: