Comment

Comment by hannob

That would still be a terrible idea. If you do it domain-based it's obviously insecure (validate -> change a-record -> attack), if you do it IP based you basically allow attacks on cloud services that rent cheap virtual servers.

Also keep in mind that a DDoS affects infrastructure on the way whose operators have not consented.

I don't really think there's an ethical way to run a DDoS "stresser" service on the public Internet.

parent hannob 3 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton