3 ms·
Why wouldn't PoW help? If it's tuned so that each device in that army takes 10 seconds instead of 10 milliseconds to make a request, have you not slowed the arm
by gspr 4mo ago
Why wouldn't PoW help? If it's tuned so that each device in that army takes 10 seconds instead of 10 milliseconds to make a request, have you not slowed the army down by a factor 1000?
- nine_k 4mo agoYou just need 1000x more zombie fridges, which may be still acceptable for some bad actors.
- denysvitali 4mo agoBut more expensive (to get). At the same time, the PoW would require more compute power do the same device will still be capped at the same rps
- gspr 4mo agoSure. But this is kind of vacuously true for any real world DoS scenario. It's like saying "sure, your new weapons system might wipe out 999 out of every 1000 of the enemy's forces, but what does it matter, they can just scale up by a factor 1000 and we're back where we started". Anything that amplifies the cost and effort required by the adversary by several orders of magnitude is worthwhile discussing.
- Catloafdev 4mo agoThen every normal user has to take 10 seconds as well, which is an awful experience.
- gspr 4mo agoPresumably most users visit the site with more compute-capable devices than a fridge. But I do agree that it's sad that such an approach artificially worsens the internet experience for people on older/weaker devices. On the other hand, Cloudflare's Turnstile also significantly weakens the experience for everyone.