News for hackers. Stuff that matters.

A comment on Steam hit by major security breach. Parent comment

Re:Steam hit by major security breach by brobinson on Monday July 27, 2015 @01:27AM (#9953496)
Another not-so-obvious bug with your example buggy code: it's also vulnerable to timing attacks.

http://codahale.com/a-lesson-in-timing-attacks/

[ Parent | on HN ]
Re:Steam hit by major security breach by tomjen3 on Monday July 27, 2015 @04:13AM (#9953986)
True, but I don't think Steam allows you enough tries to make it viable.
[ Parent | on HN ]
Re:Steam hit by major security breach by kibibu on Monday July 27, 2015 @08:24PM (#9958862)
Also not a bug, but putting strlen() inside the loop condition makes my eyes twitch
[ Parent | on HN ]