5 ms·
The side channel attack is silly and impractical. You know it's silly. I know it's silly. Let's quit pretending. The firewall rule is 100% sufficient to defend
by banister 2y ago
The side channel attack is silly and impractical. You know it's silly. I know it's silly. Let's quit pretending.
The firewall rule is 100% sufficient to defend against this exploit. All good VPNs already provide it by default. It's not deep. They're just routes.
Please stop the FUD.
- StressedDev 2y agoSide channels are a huge danger. An example is cryptographic functions have been cracked because of timing differences based on the key or data being encrypted. This is why cryptographic ciphers are implemented in constant time code (i.e. code that always runs in the same amount of time regardless of its input).
- banister 2y agoI'm talking about the specific side channel attack mentioned in their report. Not side channels generally ;)
- hughesjj 2y agoDid you say the same thing about meltdown/spectre? Ramhammer? Those are way more impractical but the industry still moved mountains (and killed perf) to mitigate them