2 ms·
If anyone thinks of implementing this, don't forget to guard against reflection attacks[1] EDIT: revisiting my comment (and the wikipedia article linked), a re
by maayank 6y ago
If anyone thinks of implementing this, don't forget to guard against reflection attacks[1]
EDIT: revisiting my comment (and the wikipedia article linked), a reflection or amplification attack in this context is sending traffic and generating (perhaps much more) traffic from a different source than yours as part of an attack. For example, you could spoof the IP address of the HTTP packets and cause the server to port scan another machine -> little traffic (HTTP request) causing a lot of traffic (port scanning). As part of a DDOS attack, a botnet for example could use this to amplify their attack and masquerade the source.
[1] https://en.wikipedia.org/wiki/Denial-of-service_attack#Reflected_/_spoofed_attack https://en.wikipedia.org/wiki/Denial-of-service_attack#Refle...