News for hackers. Stuff that matters.
Re:D(HE)at: A Practical DoS Attack on the Finite Field Diffi... by dboreham on Thursday March 07, 2024 @03:08PM (#39634004)
Yes but this is nothing to do with cryptography per se. Most servers can be taken down by a client that finds some expensive operation it can get executed, then sends a bunch of same. The solution implies a generic per-client or per-request resource limit mechanism (which in my experience some systems have, but most do not). This is probably the only good thing about "serverless"/lambda type solutions.
Re:D(HE)at: A Practical DoS Attack on the Finite Field Diffi... by anonymous-panda on Thursday March 07, 2024 @09:06PM (#39637024)
Sure, but an expensive operation sitting as a time bomb within some TLS configs is more easily exploitable than having to find some service specific exploit.