Installing Perlbal to mitigate Slowloris attacks
The idea is that Perlbal will only dispatch valid and complete HTTP requests to Apache and otherwise not choke on the Slowloris attack as Apache normally does. Several sources confirm Perlbal is able to mitigate (indeed even completely prevent) Slowlor… Continue reading
Holy F*! Slowloris
A few days ago I first found out about Slowloris. Like many others I didn’t immediately started to feel paranoid, submitted the news to my web trail and went on with my daily life. Security flaws occur on a daily basis.
Yesterday however, I received a … Continue reading