On Wed, Sep 5, 2012 at 6:40 PM, Jon Robson jdlrobson@gmail.com wrote:
I just wanted to clarify something... is there any protection in place in the thumbnail generator to prevent denial of service attacks? For instance if someone wanted to they could run a script which uploaded photos then fired off requests for thumbnails of it of size 20px,21px,22px...1024px
I'm guessing the servers wouldn't like that. This is why I'd be keen to limit the sizes.
The ability to request an image of whatever size I need is one of my most favorite MediaWiki features. It's very nice to save the extra step of resizing it after downloading it. It makes Commons images all the more easily reusable.
It's quite nice to also be able to have thumbnails of whatever size you want on Wikipedia, overriding the typical size settings.
I'd be fine if we can throttle such requests to prevent DOS and maybe other technical measures to make the feature less abused. But would be sad to see it eliminated.
While it's also nice to hotlink to the images (or via InstantCommons), some expiry on thumbnails might be acceptable.
Cheers, Katie
May I suggest someone analyses the sizes currently used on wikipedia and we limit to those as an initial step and then review the less frequently used ones and standardise on some sizes? On Sep 5, 2012 9:15 AM, "Roan Kattouw" roan.kattouw@gmail.com wrote:
On Sun, Sep 2, 2012 at 5:59 PM, Tim Starling tstarling@wikimedia.org wrote:
The other reason for the existence of the backend thumbnail store is to transport images from the thumbnail scalers to the 404 handler. For that purpose, the image only needs to exist in the backend for a few seconds. It could be replaced by a better 404 handler, that sends thumbnails directly by HTTP. Maybe the Swift one does that already.
My understanding is that thumb.php already streamed the thumbnail back to the 404 handler via HTTP and has done so for at least the past two years or so.
Roan
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l