<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Mike Bommarito</title><description>Builder, Researcher, Teacher</description><link>https://michaelbommarito.com</link><language>en-us</language><item><title>chunkloris: per-chunk http amplification</title><link>https://michaelbommarito.com/wiki/chunkloris</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/chunkloris</guid><description>cross-ecosystem measurement of per-chunk / per-frame cpu cost in production http/1, http/2, http/3, and websocket servers under one-byte-per-chunk request bodies</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>classifying packet payloads with mimelens</title><link>https://michaelbommarito.com/wiki/models/mimelens-pcap-classification</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/models/mimelens-pcap-classification</guid><description>how to identify file content type from a tcpdump pcap — including from a single 1.4 kb udp datagram — using the mimelens-medium-byte encoder.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>mimelens: small encoders for content-type detection on any byte window</title><link>https://michaelbommarito.com/wiki/models/mimelens</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/models/mimelens</guid><description>pretrained byte-level and bpe BERT encoders that classify file content from a 4 kb chunk anywhere inside a file — including a single 1.4 kb udp packet.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>chunkloris: actix-web (h2c)</title><link>https://michaelbommarito.com/wiki/per-chunk-amplification/actix-h2</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/per-chunk-amplification/actix-h2</guid><description>HTTP/2 (h2c) DATA frames. actix-web (h2c) 4.x. verdict: batches correctly.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>chunkloris: actix-web</title><link>https://michaelbommarito.com/wiki/per-chunk-amplification/actix-web</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/per-chunk-amplification/actix-web</guid><description>HTTP/1.1 chunked transfer encoding. actix-web 4.x. verdict: vulnerable per chunk.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>chunkloris: aioquic HTTP/3 example-style server</title><link>https://michaelbommarito.com/wiki/per-chunk-amplification/aioquic-h3</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/per-chunk-amplification/aioquic-h3</guid><description>HTTP/3 DATA frames over QUIC. aioquic HTTP/3 example-style server aioquic 1.3.0. verdict: vulnerable per frame.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>chunkloris: axum (on hyper)</title><link>https://michaelbommarito.com/wiki/per-chunk-amplification/axum</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/per-chunk-amplification/axum</guid><description>HTTP/1.1 chunked transfer encoding. axum (on hyper) 0.7 / hyper 1.x. verdict: vulnerable per chunk.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>chunkloris: bandit (h2c)</title><link>https://michaelbommarito.com/wiki/per-chunk-amplification/bandit-h2</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/per-chunk-amplification/bandit-h2</guid><description>HTTP/2 (h2c) DATA frames. bandit (h2c) 1.11.1. verdict: vulnerable per frame.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>chunkloris: bandit</title><link>https://michaelbommarito.com/wiki/per-chunk-amplification/bandit</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/per-chunk-amplification/bandit</guid><description>HTTP/1.1 chunked transfer encoding. bandit 1.11.1. verdict: vulnerable per chunk.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item><item><title>chunkloris: cowboy (h2c)</title><link>https://michaelbommarito.com/wiki/per-chunk-amplification/cowboy-h2</link><guid isPermaLink="true">https://michaelbommarito.com/wiki/per-chunk-amplification/cowboy-h2</guid><description>HTTP/2 (h2c) DATA frames. cowboy (h2c) 2.15.0 (cowlib 2.16.1, ranch 2.2.0). verdict: protected h2 goaway.</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item></channel></rss>