News for hackers. Stuff that matters.

A comment on Show HN: devsigh.com - post all your stories of developer sigh. Parent comment

Re:Show HN: devsigh.com - post all your stories of developer... by nbpoole on Sunday February 19, 2012 @01:45PM (#3609973)
Not quite. Your rate limiting seems to be cookie based, which makes it easy for someone to circumvent just by replaying their initial request (or by deleting the cookie you set).
[ Parent | on HN ]
Re:Show HN: devsigh.com - post all your stories of developer... by chargrilled on Sunday February 19, 2012 @02:43PM (#3610149)
Ooops.

There's about a half dozen people down_vote DOSing the server right now.

[ Parent | on HN ]
Re:Show HN: devsigh.com - post all your stories of developer... by tudorachim on Sunday February 19, 2012 @02:53PM (#3610181) 

  sudo iptables -I INPUT -s <offending ip> -j DROP
[ Parent | on HN ]
Re:Show HN: devsigh.com - post all your stories of developer... by sirn on Sunday February 19, 2012 @02:00PM (#3610023)
Or just hit the vote URL repeatedly with cURL (which is done via GET request).

The author might want to change it to POST/PUT and limit votes based on IP address instead.

[ Parent | on HN ]
Re:Show HN: devsigh.com - post all your stories of developer... by rlmw on Sunday February 19, 2012 @02:35PM (#3610127)
It's ok - someone has submitted a sigh to point this out:

http://devsigh.com/sigh/58

[ Parent | on HN ]