http://www.thummy.com/roodee My Wrong Opinions.. Wed, 23 Feb 2011 00:54:42 +0000 en hourly 1 http://wordpress.org/?v=3.2.1 http://www.thummy.com/roodee/2009/06/04/tool-ideas-2/ http://www.thummy.com/roodee/2009/06/04/tool-ideas-2/#comments Thu, 04 Jun 2009 21:26:23 +0000 Rudy Ruiz http://www.thummy.com/roodee/?p=280 So, I’ve written some Ruby classes that interact with a web application that provides web service-like functions. One of the “interesting” features it provides is authentication. Having created the Ruby API to authenticate users I now want to try to use timing attacks to enumerate valid usernames. Unfortunately, I have not been able to find anything that fills this role. There is Benchmark, but it is more focused on CPU-like measurements. I’d like a tool that is focused on measuring time between HTTP requests and responses and makes adjustments for any overhead associated with Ruby itself.

]]> http://www.thummy.com/roodee/2009/06/04/tool-ideas-2/feed/ 0