[Security] keystroke and timing attacks against IM traffic?

Jonathan Schleifer js-xmpp-security at webkeks.org
Mon Aug 4 22:29:45 CDT 2008


Florian Zeitz <florian.zeitz at gmx.de> wrote:

> If Jonathan has any other attacks in mind or found a way to apply this
> technique to XMPP I'd really like to hear about it.

I'm not saying I found an attack, but currently, an attacker would know
how long the message is _AND_ how long it has been typed. I could
imagine that this may make an attack easier.

-- 
Jonathan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
Url : http://mail.jabber.org/pipermail/security/attachments/20080805/435b09b8/attachment.pgp 


More information about the Security mailing list