Timing Side-Channel for SQL SELECT WHERE (?)altayakkus.substack.com 2 pointsbiosboiii1 year ago1 commentSaveHideCopy link On HNComments−biosboiiiOP1yI don't want to clickbait, but I went down a rabbithole of answering my question if the timing of a SQL query, comparing to a string, can be used as a side-channel to more efficiently guess that string.tl;dr is No. Enjoy :)
Comments
I don't want to clickbait, but I went down a rabbithole of answering my question if the timing of a SQL query, comparing to a string, can be used as a side-channel to more efficiently guess that string.
tl;dr is No. Enjoy :)