News for hackers. Stuff that matters.
Re:Ask HN: Website with 6^16 subpages and 80k+ daily bots by mrtksn on Thursday October 24, 2024 @07:05AM (#41934317)
Yes but the idea behind zip bombs that they appear to be very small, when expanded it can be extremely large. Before attempting to decompress, the POST request may appear something like 20kb and end up being 20gb.
Re:Ask HN: Website with 6^16 subpages and 80k+ daily bots by Aeolun on Thursday October 24, 2024 @07:13AM (#41934366)
I’d have to assume a decent implementation will eventually give up. It’s almost a given those will not be used by people crawling the internet for quick wins though.
Re:Ask HN: Website with 6^16 subpages and 80k+ daily bots by bell-cot on Thursday October 24, 2024 @10:35AM (#41935913)
> I’d have to assume a decent implementation will ...

Just like all good c code always checks for overflows.