[Security] keystroke and timing attacks against IM traffic?

[Jonathan Schleifer]

Florian Zeitz <florian.zeitz at gmx.de> wrote:

> If Jonathan has any other attacks in mind or found a way to apply this
> technique to XMPP I'd really like to hear about it.

I'm not saying I found an attack, but currently, an attacker would know
how long the message is _AND_ how long it has been typed. I could
imagine that this may make an attack easier.

-- 
Jonathan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
Url : http://mail.jabber.org/pipermail/security/attachments/20080805/435b09b8/attachment.pgp