Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No, it's not about sending large files over the wire, it's about saturating the RAM of the script that reads the content. If the script is naive enough, a zip bomb will do. Example on my machine, such a snippet will cause the OS to close the python process:

    >>> from requests import get
    >>> r = get("https://acme.tld/trap/")
    >>> r.text
The server doesn't do much (serving a relatively small number of bytes) while the client basically crashes.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: