Reproduce “Plaintext Recovery Against Post-Filtering Access Control” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Zachary Espiritu, David Cash
The authors show that post-filtering access controls can leak hidden data through query timing in PostgreSQL and relevance scores in Elasticsearch/OpenSearch. Range queries and field conjunctions recovered a 100,000-row set with 100% recall and precision in PostgreSQL. Prefix and n-gram queries recovered indexed n-gram sets exactly in a static corpus; these case studies depend on query access and tested configurations.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.