news.ycombinator.com

Untitled

Confiks · 0 points · 0 comments · há 4 dias

It's almost a shame it includes the private key and doesn't bruteforce it in-band for every request.

Comments

4 preview comments · loading full thread
cypharhá 4 dias

I wonder if more CPU cycles would be spent in the transporting and other ancillary operations (hashing and signing) than would be spent if they "brute-forced" it. Crazy.

subscribedhá 4 dias

OMG, that would be brutal

judge2020há 4 dias

I would've at least appreciated once per session

literalAardvarkhá 4 dias

They have the supporting code for using a key, I'm assuming they don't have in band bruteforce since it doesn't usually make any sense at all