Interesting. I wonder how long it takes until most bots adapt to this type of "reverse DoS".
Then we'll just be more clever as well. It's an arms race after all.
I want to know he they built that visualization
macOS compresses its memory. Does this mean we'll see bots running on macOS now?
Is it immune to zip bombs?
All I know is it compresses memory. The mechanism mentioned here for ZIP bombs to crash bots is to fill up memory fast with repeating zeroes.
I thought it was to fill all available storage. Maybe it’s both?
No, but that's an interesting question. Ultimately it probably comes down to hardware specs. Or depending on the particular bot and it's env the spec of the container it's running in
Even with macos's style of compressing inactive memory pages you'll still have a hard cap that can be reached with the same technique (just with a larger uncompressed file)
How long would it take to be considered an inactive memory page? Does OOM conditions immediately trigger compression, or would the process die first?
So I'm not an expert but my understanding is the flow is roughly:
So it's more meant to be preventative afaik
This is why I use things like Docusaurus to generate static sites. Vulnerability injections are pretty hard when there's no code to inject into.
❤️
This is a most excellent place for technology news and articles.
