Your Password is a DOS Vector
What limits should web apps place on passwords?
4 results
What limits should web apps place on passwords?
IT professionals often denigrate 'security through obscurity', but is that helpful?
A Go HTTP handler that returns a 100 GB zip bomb. Designed to punish pentesters scraping sites at endpoints that would normally just return a 404. Adapts the payload based on the Accept-Encoding header.
Punishes roughly 300 requests per site per week, with no additional cost.
A simple web extension for Firefox and Chrome that searches for all instances of "Benedict Cumberbatch" and replaces them with a funny version.
An experiment to demonstrate dangerously elevated permissions in browser extensions.
Inspired by the talk Micah Silverman gave at KCDC 2021, titled "Blasting Browser Security with Extensions".