| |||||||||||||
The hash complexity attackThe hash complexity attackPosted Apr 12, 2012 6:21 UTC (Thu) by job (guest, #670)Parent article: Python 2.6.8, 2.7.3, 3.1.5, and 3.2.3 security release
Wow. That's some ten years after this first came up. I wonder what made them change their minds.
(Log in to post comments)
The hash complexity attack Posted Apr 12, 2012 14:44 UTC (Thu) by intgr (subscriber, #39733) [Link]
> I wonder what made them change their minds.
There was a recent report about how this affects most major web frameworks:
The figure for Python (Zope+Plone) was 7 minutes of parsing for 1MB of POST data, or 20 kbit/s bandwidth to keep 1 CPU core busy.
|
|||||||||||||