New answers tagged

3

Here's a classic timing attack against SSH: http://people.eecs.berkeley.edu/~daw/papers/ssh-use01.pdf As SSH is an encrypted terminal, it would send a packet each time you press a key. As you type your password, for example, you leaked the length of your password and also the timing. This could be used to reconstruct your likely password and make it ...


4

The classic one that I can think of off the top of my head, that also happened relatively recently and posed a pretty widespread threat, was the Heartbleed bug. It was a big security vulnerability that would reveal authentication info in one of the most common ways communication gets encrypted over the internet, SSL/TLS. Most computers were affected, if I ...


6

At least for compiled languages it should also be possible to have tools that perform static analysis on machine code, shouldn't it? Indeed, such tools exist. There are companies specialized in this domain which provide this kind of tools (see this datasheet for example). But you should note that an only software tool will not be able to detect all ...



Top 50 recent answers are included