4 ms·
This is a hard call when the system is question is your anti-abuse provider. If you "fail open" when they're down, you risk allowing a flood of bad users during
by necubi 8y ago
This is a hard call when the system is question is your anti-abuse provider. If you "fail open" when they're down, you risk allowing a flood of bad users during outages. Depending on your business, that may be much worse than having an outage yourself.
(Disclaimer: I work for a smyte competitor).
- FrozenVoid 8y agoYou can turn on something like manual verification of new users, an alternative security service, or just temporary halt new account registration. All of which don't result in system wide failure. Even a few abusive users is a small and temporary cost to absorb vs complete outage.
- krainboltgreene 8y agoAh, yes, just the casual manual verification of checks notes a fire hose of data.
- BinaryIdiot 8y ago> just temporary halt new account registration I'm confused; how do you know these companies did not do that? In my experience even small companies will typically abstract away a third party service so that if it does fail it fails in an expected way. What you seem to be suggesting is that all of the companies failed in expected ways. I didn't see that in any of the articles. Did you have a source? I'm curious if it hit some harder than others.
- Klathmon 8y ago>just temporary halt new account registration. That's an outage... >manual verification of new users So is that, unless you have tons of customer support reps sitting around doing nothing when shit hits the fan.