3 ms·
Haha, this is the first thing I thought of when reading this article. In reality, it would probably be difficult to execute on a live production server via the
by jarin 14y ago
Haha, this is the first thing I thought of when reading this article.
In reality, it would probably be difficult to execute on a live production server via the TCP port method. The artificial delay they added in to prevent timing attacks might cause a heavy load on the server, so if they leave that out that would be another possible attack vector.
- webreac 14y agoI enjoyed a lot stripe 2.0 and I have watched Dan Bone on coursera. In the article, they just split the password in two. 128bit/2 -> 64bits. This remains two much for brute force like TCP port method or timing attack.