Re:Show HN: PolliticalScience – Anonymous daily polls with 2...
by ps2026 on Monday February 02, 2026 @03:57PM
(#46861443)
Actually no, I'm rate limiting per individual IP address right now. Good catch... I should probably normalize IPv6 to /64. I was originally thinking about not blocking universities or large groups that share IPs, but I guess that is more of an IPv4 NAT concern. Thanks for pointing it out! I didn't really think about a user rotating through IPs. I didn't add the rate limiting on voting until I removed the fingerprint, so that is for sure a valid concern.
[ Parent
| on HN ]
Re:Show HN: PolliticalScience – Anonymous daily polls with 2...
by 1e1a on Monday February 02, 2026 @04:14PM
(#46861638)
It could make sense to lightly rate limit at /48 in addition to /64 (this is generally the largest subnet size given out by ISPs), otherwise it will be easy for people to multiply your /64 rate limit by 65536.
Re:Show HN: PolliticalScience – Anonymous daily polls with 2...
by ps2026 on Monday February 02, 2026 @04:34PM
(#46861916)
Hey thanks for the recommendation. That makes sense. Layered rate limiting at both /64 and /48 with different thresholds. Appreciate the explanation, and I'll be adding this to the list! This is my first time dealing with a public facing app where this type of rate limiting is needed.