news.ycombinator.com

Untitled

Confiks · 0 points · 0 comments · 4 ngày trước

It's almost a shame it includes the private key and doesn't bruteforce it in-band for every request.

Comments

4 preview comments · loading full thread
cyphar4 ngày trước

I wonder if more CPU cycles would be spent in the transporting and other ancillary operations (hashing and signing) than would be spent if they "brute-forced" it. Crazy.

subscribed4 ngày trước

OMG, that would be brutal

judge20204 ngày trước

I would've at least appreciated once per session

literalAardvark4 ngày trước

They have the supporting code for using a key, I'm assuming they don't have in band bruteforce since it doesn't usually make any sense at all