2 ms·
> Denial of service is absolutely a security problem "Security problem" isn't a binary. DoS can be an issue, but often it is acceptable risk. Especially if you
by bawolff 2y ago
> Denial of service is absolutely a security problem
"Security problem" isn't a binary. DoS can be an issue, but often it is acceptable risk. Especially if your DoS is minor. E.g. i can crash the server by sending 50 Gbps of data to it, is not usually a security issue in context.
In the parent post they implied they needed privleged access to exploit. That probably makes it not a security issue as it can only be triggered by a trusted user.
Additionally most bug bounty programs disallow DoS, due to some combination of reports being low value, and testers being idiots, so it might be out of scope right from the bat.