Get the latest tech news
Tricky Web Timing Attacks Are Getting Easier to Use—and Abuse
New research shows how known techniques for finding weaknesses in websites are actually practical in uncovering vulnerabilities, for better or worse.
Researchers have long known that they can glean hidden information about the inner workings of a website by measuring the amount of time different requests take to be fulfilled and extrapolating information—and potential weaknesses—from slight variations. At the Black Hat security conference in Las Vegas this week, though, one researcher warned that web timing attacks are actually feasible and ripe for exploitation. He says the goal of the work is to show that once someone has a conceptual grasp on the types of information web timing attacks can deliver, taking advantage of them becomes more feasible.
Or read this on Wired
