[Security] keystroke and timing attacks against IM traffic?
js-xmpp-security at webkeks.org
Mon Aug 4 22:29:45 CDT 2008
Florian Zeitz <florian.zeitz at gmx.de> wrote:
> If Jonathan has any other attacks in mind or found a way to apply this
> technique to XMPP I'd really like to hear about it.
I'm not saying I found an attack, but currently, an attacker would know
how long the message is _AND_ how long it has been typed. I could
imagine that this may make an attack easier.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 801 bytes
Desc: not available
Url : http://mail.jabber.org/pipermail/security/attachments/20080805/435b09b8/attachment.pgp
More information about the Security