9 ms·
So, given that virtually every HTTP request has a uniform header, you'd need an adequate number of requests to the same page. That sounds impractical, but it wo
by trebor 13y ago
So, given that virtually every HTTP request has a uniform header, you'd need an adequate number of requests to the same page. That sounds impractical, but it won't stay that way for long. 2^24 is only 16.77 million requests, something not-so-difficult to achieve by a botnet, especially on sites that scale well (slower sites would be safer, actually).
- jnbiche 13y agoIs it possible that at least some of the high-profile "DDOS" attacks on Mt.Gox that took place earlier this year[0] were actually attempted RC4 attacks? There would have been a payoff worth the effort. I checked, and indeed Mt. Gox was using (and still uses) RC4[1]: 0. https://mtgox.com/press_release_20130404.html https://mtgox.com/press_release_20130404.html 1. http://security.stackexchange.com/questions/18863/how-secure-is-https-with-weak-ciphersuites http://security.stackexchange.com/questions/18863/how-secure...
- JshWright 13y agoThe goal with this attack is to listen in on (and have some degree of control of the plaintext contained in) requests between the server and a specific client. A botnet wouldn't help you do that.