Add Connection Pool and Execution Time Articles #12

manuelvsousa · 2020-08-28T09:28:48Z

Part of the Timing Attacks bundle.

…ction pool.

terjanq

As requested, I reviewed everything except Timing the Event Loop and Service Workers sections.

I left one big comment for CSS Selectors Short-circuit Timing, which also contains an alternative technique for measuring Event Loop timings cross-origin.

content/docs/attacks/timing-attacks/_index.md

content/docs/attacks/timing-attacks/connection-pool.md

content/docs/attacks/timing-attacks/execution-timing.md

…jquery css selectors attack.

Co-authored-by: Roberto Clapis <[email protected]>

…b.io-sources into mass-prod-timing-2

manuelvsousa · 2020-09-27T21:32:24Z

This PR closes #18

manuelvsousa · 2020-09-27T22:39:25Z

I changed Busy Event Loop and it's now a major section in the article. Sorry for this change, since you already reviewed the article before. Change introduced in cdd4fc0

@empijei

content/docs/attacks/timing-attacks/execution-timing.md

Add files for Connection Pool and Execution Time Articles.

2c06cf1

manuelvsousa requested a review from empijei August 28, 2020 09:28

manuelvsousa added 10 commits August 31, 2020 17:12

Add more content to Execution timing article.

8015dd7

Add more contents to Execution Timing Article

8fad9f2

Add more content to JavaScript timing execution articles.

7e76544

Add more contents to execution timing article.

77fccb6

Add final pre-draft for Execution Timing article.

8c8e5b7

Fix Execution Time pre-draft.

036d392

Add Socket Exhaust init.

28d86b8

Add small fixes to execution timing article and more content to conen…

3898bf5

…ction pool.

Add socket exhaust pre draf.

633fef2

Add final draft for socket pool article.

b2e2241

manuelvsousa marked this pull request as ready for review September 2, 2020 22:37

manuelvsousa marked this pull request as draft September 2, 2020 22:49

manuelvsousa requested a review from terjanq September 7, 2020 12:20

terjanq requested changes Sep 7, 2020

View reviewed changes

manuelvsousa requested a review from terjanq September 7, 2020 16:46

manuelvsousa added 4 commits September 7, 2020 18:32

Change reference for socket pool cache

e17b615

Update _index.md

1657204

General fixes on js timing attacks

c5dea35

Remove Site Isolation warning on CSS jquey attack.

bae27cf

terjanq mentioned this pull request Sep 11, 2020

Improvements to Execution Timings #18

Closed

manuelvsousa added 8 commits September 15, 2020 15:42

Add Service workers section fixes and re introduce site isolation in …

ef3d10e

…jquery css selectors attack.

Fix Socket Pool Exhaustion Article

cee8566

Add CSS Injection Section (#18)

8d97610

Fix sentence in connection pool article.

caa4020

Add more content to Execution Timing (#18)

74e3d6a

Add terjanq busy event loop attack (#18)

8ffe90e

Fix Execution Timing Defense Table (#18)

e32c30a

Fix Execution Timing Defense Table (#18)

a513010

manuelvsousa and others added 16 commits September 22, 2020 00:34

Update content/docs/attacks/timing-attacks/execution-timing.md

48b3eb0

Co-authored-by: Roberto Clapis <[email protected]>

Update content/docs/attacks/timing-attacks/execution-timing.md

c1cb3e7

Co-authored-by: Roberto Clapis <[email protected]>

Update content/docs/attacks/timing-attacks/execution-timing.md

cf37e22

Co-authored-by: Roberto Clapis <[email protected]>

Update content/docs/attacks/timing-attacks/execution-timing.md

292ccca

Co-authored-by: Roberto Clapis <[email protected]>

Update content/docs/attacks/timing-attacks/execution-timing.md

05ed8db

Co-authored-by: Roberto Clapis <[email protected]>

Add roberto 5. in execution time article.

e58c9f6

Update content/docs/attacks/timing-attacks/execution-timing.md

437c634

Co-authored-by: Roberto Clapis <[email protected]>

Add Navigation on service workers section.

b89f642

Update content/docs/attacks/timing-attacks/execution-timing.md

0cd4c66

Co-authored-by: Roberto Clapis <[email protected]>

Add requirement warning in execution timing article.

cc4d95d

Update content/docs/attacks/timing-attacks/execution-timing.md

977b4df

Co-authored-by: Roberto Clapis <[email protected]>

Add requirement messages in execution timing article.

58764a7

Merge branch 'mass-prod-timing-2' of github.com:xsleaks/xsleaks.githu…

065d1e8

…b.io-sources into mass-prod-timing-2

Add PoC in Execution Timing article and fix Rob suggestion.

94ad018

Clarify event loop passage in exec timing article.

48590a4

Clarify CSS Selectors Section

2772a5a

manuelvsousa requested a review from empijei September 24, 2020 11:46

Add better Busy Event Loop section

cdd4fc0

empijei reviewed Sep 28, 2020

View reviewed changes

empijei added 4 commits September 28, 2020 10:31

Update content/docs/attacks/timing-attacks/execution-timing.md

377cccd

Update content/docs/attacks/timing-attacks/execution-timing.md

77923e3

Update content/docs/attacks/timing-attacks/execution-timing.md

547570f

Update content/docs/attacks/timing-attacks/execution-timing.md

6f188c2

manuelvsousa requested a review from empijei September 29, 2020 14:50

Remove unclear attack (Service Workers - JS Execution Timing)

533604c

empijei approved these changes Sep 29, 2020

View reviewed changes

empijei merged commit 353785c into master Sep 29, 2020

manuelvsousa deleted the mass-prod-timing-2 branch September 29, 2020 16:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add Connection Pool and Execution Time Articles #12

Add Connection Pool and Execution Time Articles #12

manuelvsousa commented Aug 28, 2020

terjanq left a comment

manuelvsousa commented Sep 27, 2020

manuelvsousa commented Sep 27, 2020 •

edited

Loading

Add Connection Pool and Execution Time Articles #12

Add Connection Pool and Execution Time Articles #12

Conversation

manuelvsousa commented Aug 28, 2020

terjanq left a comment

Choose a reason for hiding this comment

manuelvsousa commented Sep 27, 2020

manuelvsousa commented Sep 27, 2020 • edited Loading

manuelvsousa commented Sep 27, 2020 •

edited

Loading