4 ms·
You know exactly what you are looking for at that exact address, without nothing else running and polluting the cache, and you are given an extended amount of t
by jnordwick 7y ago
You know exactly what you are looking for at that exact address, without nothing else running and polluting the cache, and you are given an extended amount of time to attack.
"you can cross boundaries of a type system" is not even close. In no world could this cod be used to gather useful data on a running system. You are literally just reading from an array you had setup.
- geofft 7y agoIt is well known in the academic literature that attacks "mitigated" by "there's too much noise, you'll have to try too many times, you can attack it in the lab but not on a real machine" are not mitigated at all. See for instance https://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf https://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf . A practical case where you have an extended amount of time to attack are when you're an ad in a background tab of a website with interesting credentials.