News for hackers. Stuff that matters.

A comment on Azure hit by 15 Tbps DDoS attack using 500k IP addresses. Parent comment

Re:Azure hit by 15 Tbps DDoS attack using 500k IP addresses by smt88 on Monday November 17, 2025 @05:29PM (#45959141)
The distribution system you're describing exists and has been in use for decades. You just distribute the build using bittorrent.
[ Parent | on HN ]
Re:Azure hit by 15 Tbps DDoS attack using 500k IP addresses by cluckindan on Monday November 17, 2025 @06:18PM (#45959581)
And if someone invests in having >90% of the peers offer a malicious file and serve DHTs matching that file?
[ Parent | on HN ]
Re:Azure hit by 15 Tbps DDoS attack using 500k IP addresses by smt88 on Monday November 17, 2025 @08:16PM (#45960316)
Torrent files are hashed, so it's exactly the same risk profile as the comment I was referring to. But generally hashing algorithms are collision-proof enough that what you're describing is basically impossible (requiring many years of compute time).
[ Parent | on HN ]
Re:Azure hit by 15 Tbps DDoS attack using 500k IP addresses by pabs3 on Monday November 17, 2025 @09:09PM (#45960620)
IIRC BitTorrent still uses SHA-1, which is becoming more problematic.
[ Parent | on HN ]
Re:Azure hit by 15 Tbps DDoS attack using 500k IP addresses by vhcr on Tuesday November 18, 2025 @05:00AM (#45963249)
BitTorrent v2 uses SHA-256, but in any case SHA-1 is still second-preimage resistant. And the BitTorrent piece hashes are included in the .torrent file, so you would need to find a double collision.
[ Parent | on HN ]