6 ms·

Using timing attacks in this case is almost not possible any actual web user would know that, do you think you can accurately analyse that the application's cho

Using timing attacks in this case is almost not possible any actual web user would know that, do you think you can accurately analyse that the application's choice of code brunch in 35000 requests successfully? (in a multi-threaded attack) Unless you are sitting by the server physically or it's in your localhost (even than, not for sure) timing attack simply not feasible.

Groxx 16y ago
You clearly do not understand the scale botnets can achieve. 35,000 won't do it, no. How about the same coming from several million IP addresses? How about millions coming from several million IP addresses?