Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

time.sleep() is also probably more granular than the timing variations you’re trying to mask.


I don't think so. What I have read is a passive attacker just listening to requests and responses. time.sleep() granularity is in microseconds.


Over enough time the remote attacker can distinguish differences on the order of clock cycles.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: