Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Maybe it's expensive to generate the 403 for a private subreddit.

A place I once worked had a 404 handler that was extremely expensive, but nobody noticed for a while because 404s are relatively rare. One time a vulnerability scanner took down the site because it was just hitting known vulnerability paths which all 404'd. The code that executed during a 404 was n^2.



As long as n=1 it‘s no problem :-)


That's exactly why the problem didn't reveal itself for a while :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: