News for hackers. Stuff that matters.

A comment on Ask HN: What's the actual fallout been from the Cloudflare bug?. Parent comment

Re:Ask HN: What's the actual fallout been from the Cloudflar... by grey-area on Monday March 06, 2017 @03:40AM (#13801486)
Another model which might work - don't take over customer dns, issue ephemeral tokens ( say 30 mins) for each ip classifying risk. Then the client site determines whether to drop connections, no tunnelling required.
[ Parent | on HN ]
Re:Ask HN: What's the actual fallout been from the Cloudflar... by rocqua on Monday March 06, 2017 @07:35AM (#13802259)
You still need to make a connection to drop it. You can DDOS just by making a lot of connections.
[ Parent | on HN ]