4 ms·
Wouldn't any kind of puzzle be too slow for embedded devices, yet trivial for a botnet? It would be intresting if this could be used to do something useful, or
by Retr0spectrum 11y ago
Wouldn't any kind of puzzle be too slow for embedded devices, yet trivial for a botnet?
It would be intresting if this could be used to do something useful, or even as a source of revenue for servers.
- brians 11y agoYes. But given a botnet can overwhelm your server anyway, Puzzles let you stay up for others with first class computers. It's not the right tradeoff every time, but it's a good tool to have for many deployments. Oh, and as to revenue: if this is useful, ads can get your browser to do profitable work. That's not a risk of want to take by designing, say, Bitcoin mining into this.
- mike_hearn 11y agoBear in mind a smart TLS server could adjust the puzzle difficulty based on some kind of IP score. It's no replacement for application level DoS filtering. But it wouldn't hurt to have such a feature either.