Hacker News Reader

When UDM shows you QUIC eats up the majority of your bandwidth you may decide to click to add a rule to block it. You may see a large reduction in overall daily bandwidth as a result. If you watch YouTube you are using QUIC. Certain QUIC vulnerabilities are a 3 or 4 packet compromise.

View on HN

Youtube will fall back to TCP. If the bandwidth utilization actually did drop it's probably because the stream quality throttled down.

What do you mean by "QUIC vulnerabilities are a 3 or 4 packet compromise"?

CVE-2023-39322 for example

QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth.

I like Google Dart and other Google products but I see too many potential issues with QUIC. From my personal experience it has behaved suspiciously on my network.

This is a particular implementation of the QUIC protocol (which is now fixed). Do you think there haven't been vulnerabilities against TCP? Certainly TCP is battle-hardened, but QUIC will get there too.

I believe in you. More of you should split off though and create more healthy competition. A 10 to 20 year plan is needed for a new protocol.

I’m Guessing the sites will then fallback to another protocol correct?

Yes plain UDP or TCP.

Reply on news.ycombinator.com