Is the 'Padding Oracle attack' deterministic?
These should both be valid paddings:

... ... ... 68 02 02
... ... ... 68 02 01


But if this ambiguity comes up, we can distinguish between the two by  modifying the second-to-last byte in some way. After flipping, say, the highest four bits:

... ... ... 68 f2 02
... ... ... 68 f2 01


Only the second one is a valid padding.