news.ycombinator.com

Untitled

Confiks · 0 points · 0 comments · il y a 4 jours

It's almost a shame it includes the private key and doesn't bruteforce it in-band for every request.

Comments

4 preview comments · loading full thread
cypharil y a 4 jours

I wonder if more CPU cycles would be spent in the transporting and other ancillary operations (hashing and signing) than would be spent if they "brute-forced" it. Crazy.

subscribedil y a 4 jours

OMG, that would be brutal

judge2020il y a 4 jours

I would've at least appreciated once per session

literalAardvarkil y a 4 jours

They have the supporting code for using a key, I'm assuming they don't have in band bruteforce since it doesn't usually make any sense at all