Posts by sandtrap

Microsoft warns of in-the-wild attacks on web app flaw

random delay does not fix the problem

A random delay on the error page does not prevent the timing attack. Only making all security checks uniform in runtime performance (between success and failure) will defeat the timing attacks.