Hidden Algorithm Flaws Expose Websites to DoS Attacks