Re:ZombieLoad: Cross Privilege-Boundary Data Leakage on Inte...
by gnode on Tuesday May 14, 2019 @02:50PM
(#19912632)
Even this isn't enough. Sometimes mutually untrusted parties must exchange data (say you're running a trading platform, or a social network). You have to ensure every point of interaction between such parties is immune to timing attacks.
[ Parent
| on HN ]
Re:ZombieLoad: Cross Privilege-Boundary Data Leakage on Inte...
by gmueckl on Tuesday May 14, 2019 @06:21PM
(#19914390)
In theory, yes. But getting statistically meaningful data on sub-ms timing variations on a jittery connection with both round trip and jitter orders of magnitudes larger is hard... it would be a very, very slow attack and probably impractical in most cases.