I found this a better explanation https://hackernoon.com/timing-based-blind-sql-attacks-bd276dc618dd https://hackernoon.com/timing-based-blind-sql-attacks-bd27

I found this a better explanation https://hackernoon.com/timing-based-blind-sql-attacks-bd276dc618dd https://hackernoon.com/timing-based-blind-sql-attacks-bd276d... Timing attacks let you get a boolean true or false answer from an injected query and, I think, guess secrets: any correct guess will give a delayed response, and a false wlil return immediately.