only one attack is not available: if attacker sends data too slow, download would be blocked. Because we decouple download from upload.
Other tasks (including extra credit tasks) are finished.