Timing Side-Channel for SQL SELECT WHERE (?)

(altayakkus.substack.com)

2 points | by biosboiii 13 hours ago ago

1 comments

  • biosboiii 13 hours ago ago

    I don't want to clickbait, but I went down a rabbithole of answering my question if the timing of a SQL query, comparing to a string, can be used as a side-channel to more efficiently guess that string.

    tl;dr is No. Enjoy :)