3 ms·
"The use of the "Carbon-Emissions-Scope-2" header field does not introduce any new security risks" - I think this is just incorrect. Knowing how much a single
by w_for_wumbo 4y ago
"The use of the "Carbon-Emissions-Scope-2" header field does not introduce any new security risks" - I think this is just incorrect.
Knowing how much a single request is producing carbon emissions tells you immediately which operations are going to be costly to a business.
You could enumerate a site's tree, find the most taxing operation, and then hammer it, because carbon-emission is short-hand for cost.
- cosmotic 4y agoYou can also use response time as a proxy for cost.
- jesterpm 4y agoSometimes. Sometimes the fast thing is just heavily parallelized.
- kadoban 4y agoCouldn't it also potentially be a side-channel for crypto breaks, depending on how it's implemented? If I'm reading it right they're advising that it should be as accurate as possible, which is also what makes a good side channel.