4 ms·
Rate limits are not going to help if you get targeted by somebody halfway serious. They’ll have plenty of nice residential IP addresses to bypass your rate limi
by johncolanduoni 3y ago
Rate limits are not going to help if you get targeted by somebody halfway serious. They’ll have plenty of nice residential IP addresses to bypass your rate limiting with.
- hknmtt 3y agoif i allow one sign up/in request per ip per second, i have no fear of bots. i could implement additional "rate limit" per ip per request if i needed and ban ips if they exceed it manually. it's very easy to do. humans don't send more than one request per handler per second anyway.
- ric2b 3y agoSo in 1 day you'll let a single IP create 86400 users. How many IP's do would think would be needed to create 10x your current user base in a single day? 100? 1000?
- hknmtt 3y agoif you keep taking all you red on the internet literally, without applying a grain of your own thinking, you won't maker it far in life.