4 ms·

I guess we can't use ssh for everything.

• Cpoll 10y ago
  That's not ssh's fault; you can pipe /dev/random into just about anything and get the same result. Rate-limiting isn't the job of the protocol, in this case - it's the job of the chat server application.
• dvanduzer 10y ago
  The lesson is that you can't authorize indiscriminate access to public services on the internet for single-factor authenticated users. edit: Ugh, Wordy. Shorter: Identity is more than a public key.
  • mikeash 10y ago
    Also, security is more than identity. You still need to be robust against malicious input even if you know exactly who all your users are.
    • dvanduzer 10y ago
      Indeed. The third leg that solves this problem is known to the industry as Accounting.