3 ms·

So, a few things. 1) no indication that there's any rate limiting here beyond a 2 second cooldown (thanks for that, grenoire), but I only tested it using burp

So, a few things. 1) no indication that there's any rate limiting here beyond a 2 second cooldown (thanks for that, grenoire), but I only tested it using burp intruder community edition, and I only tested it on a set of numbers guaranteed to return false. If anyone wants to test a range with a known-leaked number in it, up to you. 2) it's very possible that if there is rate limiting, it acts invisibly. But if there's no rate limiting as I suspect, someone can easily just iterate through this data set and extract every number (well, until cloudflare trips the requests). Alternatively, someone can request a large set of numbers that includes their own in order to fuzz the range their own number is in.

semiquaver 6y ago
Why would anyone scrape this site when they could just download the leaked dataset?
- tonymet 6y ago
  where?
  - mdoms 6y ago
    It's readily found on Google and several people have posted it in hn comments.
  - deleted 6y ago
    [deleted]
  - robjan 6y ago
    You can easily find it on various Telegram groups and the Bittorrent DHT.
- tzs 6y ago
  If they aren't rate limiting, scraping the site may be faster. So far all the posts I've seen on HN that link directly or indirectly to places you can actually download it are to copies on ufile.io, which limits download speed to 500 Kbps if you aren't paying.
grenoire 6y ago
Read the backend, two-second cooldown