3 ms·
Interesting aside: is the redacting technique vulnerable to an analogue of the "timing attack" on certain crypto? The name of the employee in the wires has bee
by koliber 9y ago
Interesting aside: is the redacting technique vulnerable to an analogue of the "timing attack" on certain crypto?
The name of the employee in the wires has been redacted. I wonder if the physical size of the redacted box, together with the fact that this is a name, together with a database of public employees, could be used to uncover the identity of the person.
By comparing the size of the redacting box with the lines above and below, we can guess that 6-9 characters are masked out (including the space). This is an a rough parallel to a timing attack used against crypto. The DB of public employees could be thought of as a list of candidate inputs.
Weak redacting?
This reminds me of a law in Poland where a person accused of a crime can not be named. Media will blur out photos and state something to the effect of "Mark W. an executive at XYZ Corp., stands accused of ...". If the accused is a well known actor with a unique first name, this becomes a running joke.
- andrewla 9y agoThe 2008 Underhanded C Contest [1] had an exercise in "leaky" redaction. The winner, [2], used a very fun approach. [1] http://www.underhanded-c.org/_page_id_17.html http://www.underhanded-c.org/_page_id_17.html [2] http://notanumber.net/archives/54/underhanded-c-the-leaky-redaction http://notanumber.net/archives/54/underhanded-c-the-leaky-re...