from Hacker News

Timing Side-Channel for SQL SELECT WHERE (?)

by biosboiii on 10/13/24, 2:45 PM with 1 comments

  • by biosboiii on 10/13/24, 2:45 PM

    I don't want to clickbait, but I went down a rabbithole of answering my question if the timing of a SQL query, comparing to a string, can be used as a side-channel to more efficiently guess that string.

    tl;dr is No. Enjoy :)