Are You 1 in 1,000,000?

Re:Are You 1 in 1,000,000? by codyrobbins on Sunday August 22, 2010 @03:42PM (#1625122)

There’s no cookie so I assume you’re restricting it to one entry per day based on IP. Could somebody ruin the whole thing by flooding the server with requests with spoofed IP addresses?

[ Parent | on HN ]

Re:Are You 1 in 1,000,000? by MichaelGG on Sunday August 22, 2010 @04:12PM (#1625175)

If someone in a position to fully establish TCP connections with spoofed IPs wanted to ruin something, I'd think they'd find something a lot more interesting to do...

[ Parent | on HN ]

Re:Are You 1 in 1,000,000? by webignition on Sunday August 22, 2010 @03:52PM (#1625140)

There's no per-IP restriction that I could see. I tried 4 different browsers on the same machine and each was able to try.

I tried with new browser sessions, with HTTP cookies and Flash cookies cleared all to no avail.

I even tried: curl -d "" http://www.areyou1in1000000.com/

There's either some really good or really bad duplicate entry prevention going on.

[ Parent | on HN ]

Re:Are You 1 in 1,000,000? by andreyf on Sunday August 22, 2010 @03:54PM (#1625144)

There's either some really good or really bad duplicate entry prevention going on.

Probably IP + User Agent.

[ Parent | on HN ]

Re:Are You 1 in 1,000,000? by Liron on Sunday August 22, 2010 @03:47PM (#1625134)

I have my own uniqueness detection heuristic. The short answer is yes, but then I'll invalidate the win and add a CAPTCHA.

[ Parent | on HN ]