And also consider that an attacker could fill just one object's directory, and then flood the system with GET requests, which will cause all servers to do that listdir/sort operation at the same time (starving out other requests, etc.).
Am I being paranoid or unrealistic?
And also consider that an attacker could fill just one object's directory, and then flood the system with GET requests, which will cause all servers to do that listdir/sort operation at the same time (starving out other requests, etc.).
Am I being paranoid or unrealistic?