Experimental News Clipping Site

Tag: timing attacks

  • MCP Server Cloud – The Model Context Protocol Server Directory: Slowtime MCP Server – MCP Server Integration

    —

    by

    Kurt Seifried
    in

    Source URL: https://mcpserver.cloud/server/slowtime-mcp-server Source: MCP Server Cloud – The Model Context Protocol Server Directory Title: Slowtime MCP Server – MCP Server Integration Feedly Summary: AI Summary and Description: Yes **Summary:** The text outlines the architecture and functionality of the Slowtime MCP Server, which utilizes a Model Context Protocol for secure time-based operations, highlighting its features…

  • Hacker News: Double-keyed caching: Browser cache partitioning

    —

    by

    Kurt Seifried
    in

    Source URL: https://addyosmani.com/blog/double-keyed-caching/ Source: Hacker News Title: Double-keyed caching: Browser cache partitioning Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the transition from traditional web caching models to Double-keyed Caching due to privacy concerns. This change fundamentally alters resource retrieval and storage in browsers, impacting performance and impacting web architecture strategies.…

  • Hacker News: Listen to the whispers: web timing attacks that work

    —

    by

    system automation
    in

    Source URL: https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work Source: Hacker News Title: Listen to the whispers: web timing attacks that work Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text introduces novel web timing attack techniques capable of breaching server security by exposing hidden vulnerabilities, misconfigurations, and attack surfaces more effectively than previous methods. It emphasizes the practical…

  • Hacker News: The Cryptographic Doom Principle (2011)

    —

    by

    system automation
    in

    Source URL: https://moxie.org/2011/12/13/the-cryptographic-doom-principle.html Source: Hacker News Title: The Cryptographic Doom Principle (2011) Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text presents the “Cryptographic Doom Principle,” emphasizing the vulnerabilities inherent in performing cryptographic operations before verifying Message Authentication Codes (MACs). Two key examples illustrate how this principle can lead to security breaches, including…