Identifying if your victim is logged in is easy:

Here is the article

http://wasjournal.blogspot.com/2006/12/use-of-time-delay-technique-for.html

I've looked into things like that before too. One of the most useful one is images that are protected behind the login. If you get an onerror, poof, they aren't logged in. That only works on certain websites, but it does work.

- RSnake
Gotta love it. http://ha.ckers.org

Time delay is a very exciting idea, especially against encryption and embedded systems.. but network time is much too inprecise for my liking :T

i probably wouldn't code any exploit and certainly not worm, that relied on that timing test.. maybe in a bind

-maluc

Maybe you can baseline it and have it check some other known timing values on the web and see how long it takes them to return. Averaging timing delays you can get a pretty concrete example of what their bandwidth and network lag looks like.

- RSnake
Gotta love it. http://ha.ckers.org