News for hackers. Stuff that matters.

A comment on Certificate transparency logs and how they are a gold mine to bug hunters. Parent comment

Re:Certificate transparency logs and how they are a gold min... by rocqua on Sunday September 09, 2018 @08:52AM (#17945677)
DNS (used to be?) is a great amplifier for DDOS attacks. Because the 'source' address is user supplied, and there are DNS responses that are much larger than the requests. So you can use 1Mb/s of data to send DNS queries with your targets IP as the source address to get e.g. a 10Mb/s stream of data to your target.

Maybe the rate-limiting is an attempt to subvert being used in this kind of DDOS.

[ Parent | on HN ]

There are no comments on this comment yet.