News for hackers. Stuff that matters.

A comment on ACIDRain: Concurrency-Related Attacks on Database-Backed Web Applications (2017) [pdf]. Parent comment

Re:ACIDRain: Concurrency-Related Attacks on Database-Backed ... by founderling on Tuesday May 28, 2019 @02:36AM (#20027723)
I mean a technical TlDr of how the actual attack works.
[ Parent | on HN ]
Re:ACIDRain: Concurrency-Related Attacks on Database-Backed ... by tadkar on Tuesday May 28, 2019 @02:58AM (#20027835)
Basically use the web APIs to issue two spend requests almost simultaneously, and the fact that it takes time for the database to synchronize means you can double spend. As the posters above are saying, it’s very similar to a race condition.
[ Parent | on HN ]
Re:ACIDRain: Concurrency-Related Attacks on Database-Backed ... by dc_gregory on Tuesday May 28, 2019 @03:00AM (#20027849)
The technical TLDR is "db level race condition", or the title of the article.
[ Parent | on HN ]