Skip to content

Comment on Timing Side-Channel for SQL SELECT WHERE (?)

Comments

I don't want to clickbait, but I went down a rabbithole of answering my question if the timing of a SQL query, comparing to a string, can be used as a side-channel to more efficiently guess that string.

tl;dr is No. Enjoy :)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.