News for hackers. Stuff that matters.
Re:TextSecure's Private Group Messaging by tptacek on Tuesday May 06, 2014 @02:06AM (#7703047)
What's the specific timing attack you're considering here?
Re:TextSecure's Private Group Messaging by nialo on Tuesday May 06, 2014 @07:12AM (#7703714)
There may not be the traditional byte at a time comparison type timing attack, but maybe this is still vulnerable to timing correlation attacks in the same sense that tor is. That is, Google or someone monitoring Google's network can look at all the messages and see who is talking to whom by matching up timing and encrypted message bodies.
Re:TextSecure's Private Group Messaging by e12e on Wednesday May 07, 2014 @03:25AM (#7709006)
I'm guessing: I send a message, you receive a message -> possible to infer (with some confidence) that I messaged you?

(I don't know if that would be feasible, but I suppose that's what avn2109 meant).

[ie: not a timing attack, but traffic analysis]

Re:TextSecure's Private Group Messaging by avn2109 on Monday May 12, 2014 @08:24PM (#7736083)
Good point. I did indeed mean traffic analysis, not "timing attack."