From d11aea526af544b4e64a3ada91b3f8db9943fa57 Mon Sep 17 00:00:00 2001 From: "Eric S. Raymond" Date: Sun, 7 Oct 2012 05:33:45 -0400 Subject: [PATCH] Note that greenlets make thread flooding more difficult. --- security.txt | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/security.txt b/security.txt index d920a12..3cfe63d 100644 --- a/security.txt +++ b/security.txt @@ -163,6 +163,10 @@ near resource limits. An ordinary DoS attack would then be prevented from completely blocking all message traffic; the cost would be a whole lot of join/leave spam due to connection churn. +We also use greenlets (Python coroutines imitating system threads) +when they are available. This reduces memory overhead due to +threading substantially, making a thread-flooding DoS more dfficult. + == Authentication/Integrity == One way to help prevent DoS attacks would be in-band authentication - -- 2.26.2