4 ms·
The article did mention the use of 40k unique IP addresses, so I'm guessing their rate limiting is based on IP address and not the username or IP+username combi
by ajtaylor 13y ago
The article did mention the use of 40k unique IP addresses, so I'm guessing their rate limiting is based on IP address and not the username or IP+username combination.
- X-Istence 13y agoWhy not both?
- fragsworth 13y agoMaybe they're doing this now that it's a real problem? At any rate, don't store really sensitive stuff on Github. It's a bad idea for many reasons, security flaws being one. In particular, keep in mind things like AWS server credentials which might go in your repository.
- rythie 13y agoDoing it by username means the real user can lose access to their account, whilst it is being attacked, even though they might have strong password.