3 ms·
You could start sending fake results after they exceed the ~100 queries, they will probably stop exploiting it.
by Xeanort 7y ago
You could start sending fake results after they exceed the ~100 queries, they will probably stop exploiting it.
- ovi256 7y agoYeah, "hellbanning" scammers is a good idea, instead of giving them a simple 401 code. Increasing the cost of their scam is the best mechanism.
- tremon 7y agoThis is a good idea, actually -- make it impossible to distinguish a banned request from a succesful request. At least that could delay the discovery period, as would randomizing the request limit.
- tlavoie 7y agoI've wondered if a web server or proxy in something like Erlang would be ideal there, where there is little server-side penalty in dragging requests out progressively longer. With the lightweight processes, the cost per should be very, very low, and basically make it easier to Turing tarpit the scammers.