Security advisory: Breach and Django

Re:Security advisory: Breach and Django by kibibu on Tuesday August 06, 2013 @09:07PM (#6170231)

Randomizing Gzip levels (and random padding) only increases the number of samples you need to take.

[ Parent | on HN ]

Re:Security advisory: Breach and Django by est on Tuesday August 06, 2013 @09:53PM (#6170366)

We can also create one-time pads for tokens, so the number of samples will ramp up pretty so quickly which will make these kind of attack unfeasible.

And I guess we can tweak gzip Huffman tables so user inputs were poorly compressed compared to rest of the page content.

[ Parent | on HN ]