News for hackers. Stuff that matters.

A comment on Remote Timing Attacks Are Practical.

Re:Remote Timing Attacks Are Practical by sillyhobbitses on Saturday July 23, 2011 @10:01AM (#2796925)
In other words, don't use versions of OpenSSL that are almost a decade old.
[ Parent | on HN ]
Re:Remote Timing Attacks Are Practical by patio11 on Saturday July 23, 2011 @01:38PM (#2797361)
It is a novel class of attacks, and bites many people squarely on the hindquarters. For example, every available Java OpenID implementation was timable back in 2010.
[ Parent | on HN ]