Comment 15 for bug 1401170

Revision history for this message
Robert Clark (robert-clark) wrote :

Amplification quotients need to be considered carefully. An attacker who can leverage this attack, which is predicated on having valid authentication credentials on the cloud, could trivally spin up N number of compute instances to generate the glance requests.