Comment on Show HN: devsigh.com - post all your stories of developer sighComments−Lewton14yThe voting system is quite.... Completely broken :) While the marker disappears, you can still keep clicking, voting as much as you'd like−chargrilledOP14yI think i've fixed that now!Fingers crossed.−nbpoole14yNot quite. Your rate limiting seems to be cookie based, which makes it easy for someone to circumvent just by replaying their initial request (or by deleting the cookie you set).−chargrilledOP14yOoops.There's about a half dozen people down_vote DOSing the server right now.−tudorachim14y sudo iptables -I INPUT -s <offending ip> -j DROP−sirn14yOr just hit the vote URL repeatedly with cURL (which is done via GET request).The author might want to change it to POST/PUT and limit votes based on IP address instead.−rlmw14yIt's ok - someone has submitted a sigh to point this out:http://devsigh.com/sigh/58−bmalee14yIt's a feature! ¬_¬
Comments
The voting system is quite.... Completely broken :) While the marker disappears, you can still keep clicking, voting as much as you'd like
I think i've fixed that now!
Fingers crossed.
Not quite. Your rate limiting seems to be cookie based, which makes it easy for someone to circumvent just by replaying their initial request (or by deleting the cookie you set).
Ooops.
There's about a half dozen people down_vote DOSing the server right now.
Or just hit the vote URL repeatedly with cURL (which is done via GET request).
The author might want to change it to POST/PUT and limit votes based on IP address instead.
It's ok - someone has submitted a sigh to point this out:
http://devsigh.com/sigh/58
It's a feature! ¬_¬