3 ms·
I also don't understand why more companies don't also implement reasonable rate-limiting and abuse detection. A suite of hacked accounts should not be able to s
by ohhnoodont 3y ago
I also don't understand why more companies don't also implement reasonable rate-limiting and abuse detection. A suite of hacked accounts should not be able to scrape millions of users worth of data.
- deleted 3y ago[deleted]
- fyrn_ 3y agoThis doesn't sense, hackers don't have to use your intended API. They probably got access the the database directly.
- ohhnoodont 3y agoAccording to the article this data was acquired by scraping data from a subset of compromised accounts.
- herbst 3y agoThere is no reason to not rate limit your user frontend. I have several pages with rate limits because of prior bot attacks and I regularly rate limit pages against bots with 'interesting data' for scraping