3 ms·

Revisionism is boring.

• tptacek 16y ago
  First of all, the video you're talking about wasn't a timing attack. Microseconds over the Internet. Nanoseconds on private networks. Here are some grandstanding security researchers demonstrating this at this year's Black Hat: http://rdist.root.org/2010/07/19/exploiting-remote-timing-attacks/ http://rdist.root.org/2010/07/19/exploiting-remote-timing-at... Note: I don't think they were even using signal processing techniques, which is what the academic results used. Since you don't even know what's being timed here, and the evidence you're collecting to support your argument is two back-to-back reloads of Hacker News, I'm not sure where you get off writing "classic white room scenario". But then, the last thread you commented on, you said "This exploit has remarkably little applicability to the vast majority of ASP.NET applications". Then Bruce told you they used it to get SYSTEM on a remote Sharepoint install.
  • ergo98 16y ago
    You keep modifying your posts to always set it such that you've "pre-rebutted" what I later say, so this thread is futile.
    • tptacek 16y ago
      This isn't a timing attack. It's an attack that, even if you adopt Microsoft's workarounds, can be exploited in a timing variant. Thai didn't demonstrate that variant. I can't make any sense of the rest of your comment.
      • deleted 16y ago
        [deleted]