5 ms·
This doesn't sense, hackers don't have to use your intended API. They probably got access the the database directly.
by fyrn_ 3y ago
This doesn't sense, hackers don't have to use your intended API.
They probably got access the the database directly.
- ohhnoodont 3y agoAccording to the article this data was acquired by scraping data from a subset of compromised accounts.
- herbst 3y agoThere is no reason to not rate limit your user frontend. I have several pages with rate limits because of prior bot attacks and I regularly rate limit pages against bots with 'interesting data' for scraping