Skip to content

Mitigating the effects of content discovery and fuzzer tools #28

Description

@orhun

Even though the names of uploaded files are random, fuzzer utilities can be used to discover content on the server.

Related questions are:

  • How can rustypaste be affected by such situation?
    • Need a demonstration of fuzzing with rustbuster or a similar tool.
  • Should there be any precautions for preventing this?
    • Implement blocking user-agents for common fuzzer tools (?)
  • Should we do anything?

I think it is an interesting topic and needs some brainstorming for improving security.

Metadata

Metadata

Assignees

No one assigned

    Labels

    help wantedExtra attention is neededquestionFurther information is requested

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions