Python Flask MongoDB - Authentication Timing Attack Explanation & Resolution

(Timestamp Links Below)

00:00 Intro
02:23 Descriptive Error Messages Are Bad?
06:47 What Are Timing Attacks
11:00 Original Version Is Vulnerable To Timing Attack
13:06 Perform the Timing Attack w/ Burp Suite
20:54 Implement Mitigation
23:07 Re-launch Attack & Verify That Mitigation Works
25:14 Outro & Thank You