News for hackers. Stuff that matters.

A comment on Notorious ‘Hijack Factory’ Shunned from Web. Parent comment

Re:Notorious ‘Hijack Factory’ Shunned from Web by wjnc on Thursday July 12, 2018 @04:14AM (#17512965)
jacquesm is known to give pretty exhaustive answers ;) I knew it wasn't an easy question, but the article seemed to indicate that at least some parties do indiscriminate blocking which struck me as rather dumb. Hence the question.
[ Parent | on HN ]
Re:Notorious ‘Hijack Factory’ Shunned from Web by Arnt on Monday July 16, 2018 @09:44AM (#17541179)
Some parties (including myself at one point in the past) block with low cost.

Suppose you're a microservice that does caching, fast-track authentication or similar. If you block a user, that user will have to spend several or even many seconds on reauthentication and/or cache refreshing, but that's the whole cost. Is your proper threshold for blocking high or low?

[ Parent | on HN ]