3 ms·
> once you download more than 2 packages, identifying which you installed is impossible. Not impossible, just marginally harder (if timing attacks can be thoug
by yc12340 8y ago
> once you download more than 2 packages, identifying which you installed is impossible.
Not impossible, just marginally harder (if timing attacks can be though of as "hard").
Keeping your specific packages of choice in secret does not buy you anything anyway. The attacker with access to your traffic will always knows, when you perform system updates, which is more important than names of specific packages.
- zaarn 8y agoIt should still be noted that this attack is a lot harder than on plain HTTP, which also opens other attack vectors such as replay attacks.