Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

From my understanding, actually surprisingly so. Stats allow you to cope with latency and uncertainty - just ask the NTP gurus. There's a reference somewhere, but effectively these attacks are possible over surprisingly long distances/dodgy connections.


And even more so, with people potentially sitting right next to each other on services like AWS, RackSpace, etc.


See "Get off my cloud" for an example how you can exploit the allocation algorithms to intentionally locate yourself on the same machine as your target.

http://cseweb.ucsd.edu/~hovav/dist/cloudsec.pdf [pdf]




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: