Re: Black Hat: New database attack revealed

Magnus Hagander wrote:
>> In our case, would it even be possible given WAL?
>
>From how I read it they rely on the time to insert into BTREE indexes (or
> to lookup for unique keys etc). I don't see how WAL would change that (well
> the values changes, but you would still see timing differences in cases
> with lots-of-equal-keys-in-the-index or such things)

Yeah, my reasoning was a little screwed up - now corrected by Greg :-)

> But I'd say that the simple act of fsyncing after every commit would in
> most cases destroy any difference between these key lookups - that random
> element coming in from different platter locations would be much higher
> than the btree difference in my guess...

Yeah.

Regards, Dave.