Comment

Comment by fooyc

Can this be used to gain some informations about the content of a webpage, with a timing attack ?

Searching a phrase on a webpage will be faster when the phrase exists, on average. If this timing is observable, this could be exploited to guess the content of a web page.

Someone did this already with selector-based anchors: https://blog.sheddow.xyz/css-timing-attack/

parent fooyc 7 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton