3 ms·
Can someone expand on the practical consequences with leaking when things were created to the millisecond?
by eins1234 5y ago
Can someone expand on the practical consequences with leaking when things were created to the millisecond?
- JoelEinbinder 5y agoConsider a timing attack: https://en.wikipedia.org/wiki/Timing_attack https://en.wikipedia.org/wiki/Timing_attack Let's say a UUID comes back with an error message. This could be used to figure out how long it took to generate the error. That could tell you if a particular resource is cached, even if you don't have access to that resource. Timing attacks are usually pretty creative. It's hard to predict how extra timing information could be misused.
- sudhirj 5y agoYou might want to expose joining dates for example, or exactly when something happened. That kind of info can leak unintentionally if someone looks at the ID and you didn’t want it exposed.