Smashing the state machine: the true potential of web race conditions

New race condition classes beyond limit-overrun exploits compromise major sites and the Devise Rails framework, powered by a single-packet attack squeezing 30 requests into a sub-1ms window.