Is such a timing attack really possible over the internet? I'd expect the code t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		simias on July 27, 2015 \| parent \| context \| favorite \| on: Steam hit by major security breach Is such a timing attack really possible over the internet? I'd expect the code to expire after a few failed attempt anyway. But I guess you're right, better safe than sorry.

brobinson on July 27, 2015 [–]

Surprisingly... yes, it is possible. See the link in my other comment: https://news.ycombinator.com/item?id=9953496

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact