News for hackers. Stuff that matters.
Re:String Comparison Timing Attacks by halfcat on Saturday June 01, 2024 @12:55PM (#40547304)
BREACH attack [1] is another interesting study.

I learned about it when someone suggested using compression to address scenarios where Tailwind CSS is duplicated in HTTP responses, and a BREACH attack was suggested as a potential downside to consider.

[1] https://en.m.wikipedia.org/wiki/BREACH

Re:String Comparison Timing Attacks by tptacek on Saturday June 01, 2024 @01:04PM (#40547373)
BREACH is, of course, a compression side channel, not a timing side channel.