4 ms·
The current record[0] in exploiting a timing difference is on the order of 100ns over the Internet. You can do much better if you can get your attack to execute
by extrapickles 5y ago
The current record[0] in exploiting a timing difference is on the order of 100ns over the Internet. You can do much better if you can get your attack to execute on the same CPU as the victim (eg: the cheaper cloud servers you typically share the cpu with others).
I don’t think it’s a popular way in as there are easier and less noisy vulnerabilities to exploit (misconfigurations, protocol errors, etc).
[0]: https://www.usenix.org/conference/usenixsecurity20/presentation/van-goethem https://www.usenix.org/conference/usenixsecurity20/presentat...