3 ms·
Is such a timing attack really possible over the internet? I'd expect the code to expire after a few failed attempt anyway. But I guess you're right, better sa
by simias 11y ago
Is such a timing attack really possible over the internet? I'd expect the code to expire after a few failed attempt anyway.
But I guess you're right, better safe than sorry.
- brobinson 11y agoSurprisingly... yes, it is possible. See the link in my other comment: https://news.ycombinator.com/item?id=9953496 https://news.ycombinator.com/item?id=9953496