One Computer Can Knock Almost Any Site Offline
This attack is notable in that it requires only one, this detail is worth mentioning.
Application layer attacks are not a new thing.
You've made a few blanket statements without further clarification or evidence and are coming across as kind of insulting.
I refer you to the Hacker News guidelines on comments : https://news.ycombinator.com/newsguidelines.html
I am aware that my replies have been brief, but WP is not a project I particularly want to defend and sadly nobody is paying me to do so.
>without further clarification or evidence
I would expect that the people making the claim about this serious new vulnerability should be the ones substantiating that claim.
Anyone who's ever ran a wordpress website should immediately know this is bullshit. It all sums up to "wordpress is really slow, this script is not particularly slow, other parts of wordpress are significantly slower".
Then there's the bunch of people telling you to restrict access to wp-admin... This is terrible advice and will break non-admin stuff that lives within wp-admin.
* As long as it's the one controlling all the other computers that control all the systems for Falcon Heavy.