The article says that there is only a factor of 6 in solution time between a high end server and low end phone. How is that possible? The server likely has much more than 6x the ram and cpu count (and faster cpus) than the phone.
Also, since it is DDOSing, the server’s work is embarrassingly parallel, but the client work isn’t necessarily parallelized at all.
Even if it is only a factor of 6 (or one) they are talking about 1 minute solve times once a DDOS is detected.
At that point the service is basically down anyway, right?