full-disclosure - Re: fast and somewhat reliable cache timing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 5 Dec 2011 08:11:18 +1100
From: xD 0x41 <secn3t@...il.com>
To: Michal Zalewski <lcamtuf@...edump.cx>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: fast and somewhat reliable cache timing

hey!

OK tested THIS variant, and it seems to gather *some* info, so it is
working, altho, this is using Private-browsing,, the other one by the
other person failed completely (visipi)..
Interesting is what results it gathered... Flickr and Newegg , but no
ebay or paypal :s i guess they have a higgher level of sec...
very cool stuff mick!
drew

On 4 December 2011 19:51, Michal Zalewski <lcamtuf@...edump.cx> wrote:
>> http://lcamtuf.coredump.cx/cachetime/
>
> OK, just for the record: I improved the original PoC quite a bit, and
> added experimental variants for other browsers. I will shut up now.
>
> /mz
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/