00:00When you enter your password, some websites check it one character at a time.
00:05So if the first letter is wrong, the login fails right away.
00:08But if the first letter is correct, the system moves on to check the next one.
00:13And that causes just a tiny delay.
00:16It's so small a person would never notice it, but a hacker's computer can.
00:21So they can try every possible first letter and watch which one makes the website take slightly longer to respond.
00:28That tells them the first letter is right.
00:31Then they do the same thing for the second letter.
00:34Then the third.
00:35And if the website keeps giving away those tiny timing clues, the hacker can slowly piece together the entire password.
Comments