> > Weston argues that this design protects against malware and unauthorized access through rate-limiting, [...] > What about "authorized access", who defines

> > Weston argues that this design protects against malware and unauthorized access through rate-limiting, [...] > What about "authorized access", who defines that. I don't think the intent is that they distinguish between unauthorized and authorized access and then only rate-limit the former, but rather that they're implementing a rate-limit on all access low enough to hinder malware extracting all snapshots while high enough to hopefully not impact normal usage. But I agree that releasing the source code would be useful to let people properly verify these properties.