4 ms·
> Far less likely is that someone could be trying to discover/exploit a timing attack on the forgotten password generation algorithm. Didn't somebody do that a
by Splines 14y ago
> Far less likely is that someone could be trying to discover/exploit a timing attack on the forgotten password generation algorithm.
Didn't somebody do that already?
- eli 14y agoIt was the session cookie key not the password, and it wasn't really a timing attack in the sense the parent means. But yeah http://news.ycombinator.com/item?id=639976 http://news.ycombinator.com/item?id=639976