Re: Black Hat: New database attack revealed - Mailing list pgsql-advocacy

From Dave Page
Subject Re: Black Hat: New database attack revealed
Date
Msg-id 46B1D5AC.6080203@postgresql.org
Whole thread Raw
In response to Re: Black Hat: New database attack revealed  (Magnus Hagander <magnus@hagander.net>)
List pgsql-advocacy
Magnus Hagander wrote:
>> In our case, would it even be possible given WAL?
>
>From how I read it they rely on the time to insert into BTREE indexes (or
> to lookup for unique keys etc). I don't see how WAL would change that (well
> the values changes, but you would still see timing differences in cases
> with lots-of-equal-keys-in-the-index or such things)

Yeah, my reasoning was a little screwed up - now corrected by Greg :-)

> But I'd say that the simple act of fsyncing after every commit would in
> most cases destroy any difference between these key lookups - that random
> element coming in from different platter locations would be much higher
> than the btree difference in my guess...

Yeah.

Regards, Dave.

pgsql-advocacy by date:

Previous
From: Magnus Hagander
Date:
Subject: Re: Black Hat: New database attack revealed
Next
From: Lukas Kahwe Smith
Date:
Subject: Re: Black Hat: New database attack revealed