3 ms·
This isn't a patch, only a workaround until a patch is released. The workaround includes random bits of time and generic error pages, I'm sure the official pat
by ronnier 16y ago
This isn't a patch, only a workaround until a patch is released. The workaround includes random bits of time and generic error pages, I'm sure the official patch will be more than that.
- alecco 16y agoThe workaround doesn't work around the vulnerability. It only works around the most obvious implementation. This gives a false sense of security.
- tptacek 16y agoAgree strongly with this, for what it's worth. It also perpetuates an obnoxious myth about hiding side channels (see above thread).