• pelespirit@sh.itjust.works
    link
    fedilink
    arrow-up
    9
    ·
    1 day ago

    But you can tell what a person is typing by their timing and rhythm. I don’t have time right now, but there are articles on that.

    • Deebster@infosec.pub
      link
      fedilink
      arrow-up
      10
      ·
      edit-2
      1 day ago

      True, people should search for “keystroke timing attacks”. It’s more effective if you include things like accelerometer data and audio.

      We can see what Cloudflare’s code is measuring and reporting to find out if those attacks would be possible.