News for hackers. Stuff that matters.
Re:The Serde Rust Framework by ttymck on Thursday October 14, 2021 @06:09PM (#28870855)
This is interesting, and news to me. Your comment suggests something about Rust imposes this problem on all web frameworks, is that true? If so could you share the root cause?
Re:The Serde Rust Framework by xet7 on Thursday October 14, 2021 @06:17PM (#28870930)
I'm just newbie in Rust. Does some web framework not use hyper? I'm trying to find web framework that does not have problem with Slow-Loris.
Re:The Serde Rust Framework by fwip on Thursday October 14, 2021 @07:46PM (#28871831)
This doesn't solve your problem out of the box, but I think most reverse-proxies have configurations that can protect the services behind them from these sorts of attacks.
Re:The Serde Rust Framework by Ericson2314 on Thursday October 14, 2021 @06:24PM (#28871003)
I don't think anyone will want to avoid hyper, tbh, that's a lot of work to hand-roll instead. so you better advertise the issue there instead, and if they refuse to do anything about it then make a big stink downstream.