4 ms·
Unlimited doubling of wait time puts you right back to being vulnerable to DOS.
by drfuchs 10y ago
Unlimited doubling of wait time puts you right back to being vulnerable to DOS.
- Loggie 10y agoSurely DOS would only be an issue if the service literally sat there doing nothing for that period of time? Isn't the solution here just to reject all requests for that period of time doing the absolute minimum processing required?
- detaro 10y agoNot DOS against the entire service, against a targeted user not being able to access the server (because you just entered a wrong password often enough that the system blocks his valid log-in attempts).