Hacker News .hnnew | past | comments | ask | show | jobs | submit | AlexV's commentslogin

It would be fun to execute this against a mobile device, where storage is expensive. 2GB might be all that is required to choke the device. A neat client-side DDoS :)


Heh, you could easily DoS a Canadian home internet user (not mobile) by transferring a massive amount of data behind their back. So many people here are stuck with 25GB/mo limits.


That's absurd. I can't even imagine having to live with that kind of cap—I easily download 25GB in a day.


It's not uncommon to find ISPs with monthly quotas of a few GBs - aimed at light users.


I think Opera Mobile shouldn't have this cache problem either, similar to my comment about the desktop version. The default cache limit in Opera Mobile is ~2 MB.

I _believe_ that both quotas can be increased after confirmation from the user, but I haven't made any tests.


Or rack up an insane unexpected data bill.


iOS (and Android I think, but I primarily dev iOS so that's where my knowledge is) won't let a website exceed a 5MB local storage limit without explicit user consent...so I suppose still technically possible, but not without getting the user to agree to it first.


I wonder if you could still perform a DOS by doing the following:

  - register 1000 domains
  - when the browser navigates to the first domain, store 5Mb
  - once the store has finished, redirect to the next domain
  - repeat steps 2-3 ad infinitum
Anybody know if this would work?


That could probably work!

The documentation at http://dev.w3.org/html5/spec/offline.html#disk-space states that "care should be taken to ensure that the restrictions cannot be easily worked around using subdomains", so one would really have to use different domains as you write, which sounds a bit costly.


Sub-domains should work also then. Just make a page with bunch of IFrames, each on a different, random sub-domain.

Edit: Ooops; didn't see the comment above about sub-domains. Worth a try though!


A malicious actor might write a wordpress worm to assemble a domain botnet and cross-link them all to each other such that visiting one stores 5 megs of nonsense from every site on a visitor's client.


At least on Gingerbread, the browser has quite a low global limit -- I sometimes hit it just from using Twitter and Google Search.


I mean, theoretically. But would a user actually willingly wait out this process?


They would if you do it in an iframe while letting them play a flash game. They might even attribute slowdowns to the flash game.


it doesn't need to be downloaded. it can be populated with generated data using JavaScript.


You can store up to 50 mb in appcache (instead of localstorage) in mobile safari. You can also store 50 mb in the web sql storage, but i don't know if that shares the appcache storage or is counted separately. The 5 mb limit for localstorage is because that's what the spec recommends.


localStorage and application cache are not the same thing.

localStorage is the one that prompts the user for more than 5MB, but the author was using application, which I've never seen prompt.


unless something's changed in the last couple months, localStorage prompts for any storage, and cuts you off completely at 5MB.


If you're talking bandwidth cap attacks, then you could just keep cleaning out local storage and downloading more from /dev/random perpetually.


I would be curios to see a LinkedIn graph showing (and proactively finding) evidence of this whole saga. That is, I would expect to see less movement of employees with certain talents, between conspiring companies.


Absolutely. I bet there is a huge statistical relationship there.


Is there a way to get this information off of LinkedIn?

I am guessing it would be possible to pull it out of Google+ profile pages, but I am not sure it has historical data, or been around long enough for that matter.

Facebook would surely have it but I doubt this information is accessible.


As a non-US citizen, I am seriously considering donating EFF in hope to stop US imposing its' law on the rest of the world.

Thoughts? Has any non-USA citizen donated to EFF before?


I don't see how this could be a bad thing.


It could be bad if I spent the same amount at the EFF-equivalent of my own country. The problem is that USA might be too powerful and the original EFF would be "taking the fight to their filed."

Just wondering which is more effective.


I tell a very similar story. I sleep 5-6 hours. No respiratory problems. Supreme night owl.

Now I feel tired...


I think this is a tendency for entrepreneurs and/or tech people. The exception are those guys that sleep 4 hours per night and are fine the next day. I hate/envy them so!


A better example would be something like this: most PhDs of UIUC in the field of Science use the same vocabulary, despite having PhD in different fields. Hence, a team of PhDs in different, adjacent fields of Science, from UIUC, might be able to both complete each other and hit the ground running faster.

Of course, adding new member(s) to such a team should not require "PhD from UIUC". Rather, the team must also be able to absorb a member and teach him the vocabulary required to collaborate and contribute effectively.

Personally, I work as a technology/security expert in a team that consists of PhD, machine-learning experts. I've been taught enough vocabulary to understand and follow the conversation and be able to contribute and feel purposeful and innovative from my - very different - perspective.


Brilliant doodle by Google! The drawings are exactly Lem's style, so I recognized them immediately, having grew up on Lem's book.

Truly amazing and timeless books. :)


I scored 25. Whatever that means...


Same here. Based on the replies so far, the HN average is 23.15385.


An equally important question is "when?" I don't understand why this part is overlooked. Getting ICS within a month of release is not the same as getting ICS 12 months after release.


I am also more interested in when. I can only make wild speculations based on history. The first phone to feature ICS will be the Galaxy Nexus which will begin being sold around mid-November. In the past it has taken around a month for the previous gen Nexus to get the OS update. I'm holding out hope that the Nexus S will get the update by mid-December, but that is just speculation. As for other carriers and manufactures, there is no telling when upgrades may come. Upgrading people's phones with a better OS does not exactly help sell phones so I'd bet a longer wait for those without a Nexus S.


I compare Google's Android ecosystem to a restaurant: I ate once and received wonderful food and service. I go there again next week and the food is cold and the service is rude.

Android's inconsistency is as big problem for Google as it is to the restaurant - if it's inconsistent, I stop going.

I own several Android devices, with the SGS2 being the latest. If it is going to be inconsistent with the update & timing as the rest of them - next time I'm going to the competition, whoever it might be.


This reminds me of Guy Kawasaki's mission statement from his Apple days:

"In 1983, when I started in the Macintosh Division of Apple Computer, beating IBM was our reason for existence. We wanted to send IBM back to the typewriter business holding its Selectric type-writer balls. In 1987, our reason for existence became beating Windows and Microsoft. We wanted to crush Microsoft and force Bill Gates to get a job flipping fish at the Pike Place Market." -- www.guykawasaki.com/the-art-of-the-start/artprop.pdf


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: