News for hackers. Stuff that matters.
Re:RssCloud, WordPress. FeedLand, and Dave Winer by carapace on Saturday December 24, 2022 @11:02AM (#34118036)
> a user did not have to find a rssCloud server for their feed to reference – their own site could handle feed registrations and notifications to feed reader apps. This created a supply of literally millions of weblogs that could support quick notifications to their readers if their reading app supported the use of rssCloud.

Um, is it just me or does that sound like a DDOS waiting to happen? (I'm out of the loop on these things.)

Re:RssCloud, WordPress. FeedLand, and Dave Winer by kevincox on Saturday December 24, 2022 @03:41PM (#34120880)
Can you provide details?

I'm not familiar with RssCloud but WebSub requires the notification endpoint to confirm a subscription before sending new entries. So your DoS amplification is one small HTTP request for a small HTTP request. I guess at best it would make it slightly harder to block as it is coming from everywhere.

Re:RssCloud, WordPress. FeedLand, and Dave Winer by carapace on Tuesday December 27, 2022 @10:44AM (#34149580)
> Can you provide details?

Sorry, no. I'm not an expert. I'm just pattern matching.