News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django. Parent comment

Re:Security advisory: Breach and Django by est on Tuesday August 06, 2013 @08:39PM (#6170153)
This. Suppose we could randomize Gzip levels differently in each response.
[ Parent | on HN ]
Re:Security advisory: Breach and Django by kibibu on Tuesday August 06, 2013 @09:07PM (#6170231)
Randomizing Gzip levels (and random padding) only increases the number of samples you need to take.
[ Parent | on HN ]
Re:Security advisory: Breach and Django by est on Tuesday August 06, 2013 @09:53PM (#6170366)
We can also create one-time pads for tokens, so the number of samples will ramp up pretty so quickly which will make these kind of attack unfeasible.

And I guess we can tweak gzip Huffman tables so user inputs were poorly compressed compared to rest of the page content.

[ Parent | on HN ]