4 ms·
The kill-switch-on-error idea is very interesting and I can see why it might be necessary for something like Tarsnap. One question though: could this feature b
by hopeless 16y ago
The kill-switch-on-error idea is very interesting and I can see why it might be necessary for something like Tarsnap.
One question though: could this feature be used in a denial-of-service attack? i.e., induce errors in the Tarsnap server or it's supporting environment (such as DNS) so that it shuts down for everyone? Admittedly, there doesn't seem to be much point in this but I'm curious if it's an angle you've considered.
- chopsueyar 16y agoNot after his code change.
- cperciva 16y agocould this feature be used in a denial-of-service attack? i.e., induce errors in the Tarsnap server or it's supporting environment (such as DNS) so that it shuts down for everyone? If you can impersonate an S3 server, yes. But if you're impersonating an S3 server, I want Tarsnap to shut down pending investigation.