4 ms·
This could have been used to stop the Github DDOS from China, if I'm understanding it correctly
by peteretep 11y ago
This could have been used to stop the Github DDOS from China, if I'm understanding it correctly
- codedokode 11y agoNo. They injected code into some visitor analytics script (like GA) and those scripts are constantly updating so you cannot calculate and store the hash.
- bsder 11y agoWell, seems like a good reason to block scripts that are constantly updating, no? I suspect this is going to become a turbo AdBlock. If the original page doesn't sign the content, block it.
- vinceyuan 11y agoI guess so. GitHub hit by DDoS attack https://news.ycombinator.com/item?id=9275041 https://news.ycombinator.com/item?id=9275041
- cbr 11y agoNope: http://www.jefftk.com/p/sri-against-the-great-cannon http://www.jefftk.com/p/sri-against-the-great-cannon
- peterwaller 11y agoOnly if this feature had widespread adoption. And if the GFW doesn't replace the hashes in the original content.