2 ms·
Well you said the client refetches the key, so that sounds like a network request you could observe.
by im3w1l 4y ago
Well you said the client refetches the key, so that sounds like a network request you could observe.
- tptacek 4y agoSure; you could also look for all-zero SIDs. That relies on you knowing about this attack a priori, and if you know about it you can just not have the vulnerability.
- im3w1l 4y agoYeah, I was just trying to evaluate the risk that >Mega could have run this attack over long periods of time, in parallel for all its users; without anybody catching on. In light of our discussion, I don't think it's too likely.
- tptacek 4y agoNo, I don't agree at all. There is literally new science in this paper; the idea that random "security researchers" looking at benign-looking crypto code and monitoring all the connections their clients made (a thing nobody does) would ever have caught this is not plausible.