[Full-disclosure] Thomas Ptacek and Wikipedia
ALERT ALERT Quick cheeky posting by unknown gobble member staff over Thomas Ptacek's latest Wikipedia absurdness. lol ... Finally Symantec has taken notice, and started to add there own stuff to SF .. FINALLY !!! http://turkeychargen.blogspot.com ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Thomas Ptacek and Wikipedia
On Dec 14, 2007 8:22 AM, Gobbles is back [EMAIL PROTECTED] wrote: ... Quick cheeky posting by unknown gobble member staff over Thomas Ptacek's latest Wikipedia absurdness. PS: Your Homework Assignments Thomas Ptacek to retract all stupid commentary from world wide web. examples: I don't think this is a timing attack; it's a side-channel attack that exploits the fact that OpenSSL's impact on the branch prediction cache leaks information. correction: timing attacks are a subset of side channel attacks, therefore the above comment is stupid. examples: we were turning out more lines of code per day than my old employer! Turns out I forgot about a little thing called QA correction: detailing how poorly build security in and solid engineering are applied to your forthcoming security product is bad. it makes executives and marketing angry! many more to list. i expect 3,463,492 words rewritten double spaced on formal retraction by end of week. GOBBLES your homework is less gossip more sploits. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Thomas Ptacek and Wikipedia
On Dec 15, 2007 2:51 PM, coderman [EMAIL PROTECTED] wrote: ... I don't think this is a timing attack; it's a side-channel attack that exploits the fact that OpenSSL's impact on the branch prediction cache leaks information. someone says to me, Branch Prediction Analysis side channel attacks are not traditional timing attacks. sure, not _traditional_ timing attack. active interference for targeted misses gives much more key than traditional passive timing. but this is still a timing attack, even if one much more effective than most. someone is now informed. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/