Hacker News Reader

>There are certainly lots of malicious bots scanning for vulnerabilities, DDoSing sites and so on but this applies to people as well.

Nah, a human isn't going to waste their time refreshing a page manually 50,000 times.

View on HN

But it surely can attemp cross-site scripting, send phishing and spam messages, broken requests and look for exploits. Also TOR is generally so slow I don't think there is even the possibility of generating enough traffic for a DOS.

It would depend on the website's resources and services. For example, a layer 7 DoS which just queries an expensive endpoint on the website over and over may not need high traffic volume to overload the website's systems.

Which seems to be a pretty easy pattern to detect. (And not something you'd want to do over Tor)

Reply on news.ycombinator.com