I'm surprised there's not a thread about theory crafting yet! This thread is what the name implies. If you have an idea about a potential attack vector or any kind of fun wacky brain teasers, you may post it here.
Ideally, you'll want to structure your idea as such :
>Present your main idea
>Describe what you understand about the subject you want to tackle
>In what kind of situation would your idea apply?
>How would the attack proceed?
>Describe the general effect or the intended effect, rather, on the victim.
No need to follow the exact same structure, this is just for the sake of keeping some semblance of quality in this thread.
And please keep the theories somewhat plausible? No OP fantasies like "If there was no security on X, could I do Y ?" Because the answer will always be "Ofc you could, [Insert insult here]."
Here's an idea I was going to post (with pic related) in the general question thread, but thought it would be better suited in it's own thread. An example and legit question I'd like to discuss.
>Would it be possible to "overfeed" a computer with cookies? From what I understand, modern browsers (or servers?) have limits on cookies. usually 4k size, 20~50 cookies per domain, but it's merely a suggestion from the RFC. I imagine the client could disable those restrictions on the browser (or maybe the browser doesn't have those restrictions at all) and, if possible, a server could send multiple heavy cookies in an attempt to slowly fill the victim's drive. I'm still unsure if the limits are bound to the browser or the server, though.