News for hackers. Stuff that matters.

A comment on The Need for Web UDP. Parent comment

Re:The Need for Web UDP by feross on Wednesday July 26, 2017 @04:27PM (#14859971)
This is nothing new. It's trivial to make website visitors DoS a target IP address using XHR requests, WebRTC, <img> tags, etc.

WebUDP wouldn't necessarily make the situation any worse.

[ Parent | on HN ]
Re:The Need for Web UDP by rnhmjoj on Wednesday July 26, 2017 @04:53PM (#14860236)
Like the attack on GitHub a few years ago: https://www.eff.org/deeplinks/2015/04/china-uses-unencrypted...
[ Parent | on HN ]
Re:The Need for Web UDP by Ironlink on Wednesday July 26, 2017 @06:44PM (#14861066)
Seems to me that one key difference would be that giving javascript access to UDP sockets easily enables a single browser to send huge amounts of traffic since there's no ACK to wait for. With anything based on TCP, the attacker at least has to put some effort in to achieve that.
[ Parent | on HN ]
Re:The Need for Web UDP by IshKebab on Thursday July 27, 2017 @04:25AM (#14863540)
You could easily design it so that you can only send UDP packets to hosts you already have a TCP connection with.
[ Parent | on HN ]