[Date Prev][Date Next][Thread Prev][Thread Next]
[Date Index]
[Thread Index]
- Subject: Re: [ANN] Lua 5.2.1 (work1) now available
- From: Roberto Ierusalimschy <roberto@...>
- Date: Thu, 22 Mar 2012 15:21:49 -0300
> Roberto Ierusalimschy wrote:
> > Moreover, a small overhead may be acceptable as a price for solving
> > the "hash complexity attack" (that people will worry about despite all
> > contrary evidence).
>
> I thought I had read all the posts in the original thread about this
> issue, but I don't remember any contrary evidence. Did I miss something?
Probably yes. Mike Pall sent a very good message about that. The point
is not only whether a "hash complexity attack" is doable, but that
there are so many other ways to do a DoD attack that this one is not
relevant. (E.g. it is very cheap to just rent botnets.)
-- Roberto