Post #1359225
2025-10-26 15:13 UTC
@chrysn second step: DDoS. If they are on the computer anyway, why not deputize them for crawling?
Replies (2)
-
@chrysn@chaos.social 2025-10-26 15:20
@claudius If there's actual page-consuming users behind every single request, it'd take a colossal effort to pull of DDoS. Cloudflare (whose business interest admittedly is to over-report DoS attacks) clocks even 2010-level attacks at 600k requests per second, so even with low-attention-span users (maybe 5s/page), that'd take 3 million humans for the duration of the attack. If someone can just so convince 3M people to constantly click through slow-loading pages, we have bigger issues than DoS.
-
@13reak@infosec.exchange 2025-11-02 19:28
@claudius @chrysn Yeah, put some zip bombs and infinite directory structures in some directories only crawlers find. Give them a taste of their own medicine.