News for hackers. Stuff that matters.
Re:Abusing WebRTC to reveal coarse location data in Signal by andrewstuart2 on Wednesday May 20, 2020 @07:47PM (#23253375)
I find that interesting, because you could probably classify physical location revelation attacks with other timing-based attacks for which we've had to resort to constant-time algorithms (e.g. key protection via constant-time cryptographic operations).

There's an interesting fundamental tradeoff somewhere between optimization and information. If you make things as efficient as possible, you'll probably leak information.

Re:Abusing WebRTC to reveal coarse location data in Signal by jerrysievert on Wednesday May 20, 2020 @09:07PM (#23253850)
> If you make things as efficient as possible, you'll probably leak information.

at which point the threshold could lower ...