News for hackers. Stuff that matters.

A comment on The paranoid #! Security Guide. Parent comment

Re:The paranoid #! Security Guide by Spittie on Sunday July 14, 2013 @09:53AM (#6040871)
From what I've read online, it should be possible to estimate the uptime of your machine with TCP timestamps.

I'm not sure why this would be a problem, maybe an attacker can see that you haven't rebooted to install a kernel update?

[ Parent | on HN ]
Re:The paranoid #! Security Guide by gnosis on Sunday July 14, 2013 @10:02AM (#6040889)
Ah, interesting. I think I recall reading that attacks against crypto can be helped by uptime estimates.

Uptime can be used as a source of "randomness" in PRNGs, so knowing that bit of information could clearly be beneficial to an attacker.

[ Parent | on HN ]