[opensource-dev] Malicious payloads in third-party viewers: is the policy worth anything?

[Thomas Grimshaw]

  Loading 1mb of content per user is hardly a denial of service attack. 
Crosslinking occurs everywhere on the web, this is simply nothing but 
paranoid bull.

I'm not a big fan of the Emerald team either, they're arrogant, 
two-faced, cast themselves as elitists, and censor comments on their 
website that don't speak in their favour.

But if you're going to make such accusations, do some research on 
exactly how much traffic is required to negatively impact a server (at 
least, one that's hosted on a proper connection).

Tom.



On 21/08/2010 14:40, Aidan Thornton wrote:
> The attack involved loading about 1 MB of images and a whole bunch of dynamically-generated
> content from the Emerald login screen displayed every time a user
> opened Emerald to consume both bandwidth and server CPU time.