A Timing Attack In Action

Re:A Timing Attack In Action by aidenn0 on Monday August 20, 2012 @04:44PM (#4409703)

Something not mentioned here is that timing attacks have been proven effective even across the internet; you might think "Oh the jitter in TCP is going to overwhelm any leaked information," but you would be wrong.

[ Parent | on HN ]

Re:A Timing Attack In Action by darkhelmetlive on Monday August 20, 2012 @05:08PM (#4409799)

I do have the sentence "This difference is enough to measure, even on web applications." in the fourth paragraph. Should I highlight that a bit, bold maybe?

I'd also like a good reference for that, and my Google skills were failing me. Do you happen to have a link to something show that off?

[ Parent | on HN ]

Re:A Timing Attack In Action by colonelxc on Monday August 20, 2012 @05:29PM (#4409883)

http://www.cs.rice.edu/~dwallach/pub/crosby-timing2009.pdf

[ Parent | on HN ]

Re:A Timing Attack In Action by darkhelmetlive on Monday August 20, 2012 @05:41PM (#4409930)

Awesome, thanks!

[ Parent | on HN ]

Re:A Timing Attack In Action by aidenn0 on Monday August 20, 2012 @05:16PM (#4409838)

http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf

[ Parent | on HN ]

Re:A Timing Attack In Action by darkhelmetlive on Monday August 20, 2012 @05:41PM (#4409932)

Awesome, thanks! Added this and the other one to the post.

[ Parent | on HN ]

Re:A Timing Attack In Action by aidenn0 on Monday August 20, 2012 @05:17PM (#4409840)

I missed that on the first read-through. Invariably when you introduce someone smart to timing attacks they will say "Oh, but that's not going to be practical over TCP/IP.

[ Parent | on HN ]