4 ms·
An attacker could probably use a remote server and mesure the timing differences between http packets. It doesn't matter if your timing source is high noise wi
by phire 8y ago
An attacker could probably use a remote server and mesure the timing differences between http packets.
It doesn't matter if your timing source is high noise with lots of jitter, the attacker can repeat the mesurements over and over again and filter everything out.
Even if the attacker can only pull out a few bytes per second, that might be enough to leak something critical like and encryption key or an ASLR offset.