https://nalar.dev/tags/denial-of-service/ Recent content in Denial of Service on Nalar Hugo en-us Sun, 06 Sep 2026 00:00:00 +0700 https://nalar.dev/bound-work-before-processing-untrusted-input/ Sun, 06 Sep 2026 00:00:00 +0700 https://nalar.dev/bound-work-before-processing-untrusted-input/ <p>An input does not need to be malicious code to hurt a service. It only needs to make the service spend far more memory, CPU time, storage, or concurrency than the sender spent creating the request.</p> <p>A parser may accept deeply nested data. A compressed upload may expand far beyond its transfer size. A search endpoint may allow a query that is valid but unusually expensive. If enough work begins before the application applies a limit, a small amount of incoming traffic can consume resources needed by legitimate users.</p>