4 ms·

I mean deducing the package from download size is way harder than just seeing the name in the open.. security is rarely perfect and more like an arms race, maki

I mean deducing the package from download size is way harder than just seeing the name in the open.. security is rarely perfect and more like an arms race, making things more difficult is a big deal. This kind of "you can hack Y too" argument doesn't make any sense if its way harder to hack Y than X.

jlarocco 8y ago
I would agree with you IF it were actually "way harder", but realistically it's no more difficult than checking the file name or the md5 checksum.
gtsteve 8y ago
What if keepalive is used and multiple packages are downloaded? Surely that is at least plausible deniability.