Post #1359226
2025-10-26 15:20 UTC
@claudius If there's actual page-consuming users behind every single request, it'd take a colossal effort to pull of DDoS. Cloudflare (whose business interest admittedly is to over-report DoS attacks) clocks even 2010-level attacks at 600k requests per second, so even with low-attention-span users (maybe 5s/page), that'd take 3 million humans for the duration of the attack. If someone can just so convince 3M people to constantly click through slow-loading pages, we have bigger issues than DoS.
Replies (1)
-
@chrysn@chaos.social 2025-10-26 15:21
@claudius Of course, if their browsers load content *beyond* what the viewed page is including and the explicit preload links, then those users turned their hosts into part of a botnet willingly, and need to expect blocking like any other botnet.