3 ms·
Author here. There are no major security issues and it's also compliant with the API rate limiting restrictions.
by ludovicianul 4y ago
Author here. There are no major security issues and it's also compliant with the API rate limiting restrictions.
- masklinn 4y agoIncluding the new secondary rate limits? They’re quite annoying.
- bobleeswagger 4y agoIt's a fine line, if Github wanted to I'm sure they could write up a convincing cease and desist. I think they spoke up about it because your article gives the impression that this sort of thing (fuzzing APIs) is okay, which I wouldn't exactly say is positive.
- ludovicianul 4y agoTrue. This is why I run it only for one path. I also run it against Kubernetes API and some of the payloads resulted in timeouts which I submitted to the security team.