Protect from POST spamming, botting, and so on... #7

Open
opened 2 years ago by dawidkubis · 0 comments
Owner

As of 06d2d7a957, one can DDOS the entire thing by just spamming POST's with correctly formatted data. Incorrect POST's shouldn't be an issue simply because of kchan's speed. I'm not sure if this kind of spamming can be handled by an nginx gate or similar.
I was thinking of adding a TardWrangler struct, which would lazily process POST data, and handle ip timeouts.
As far as I'm aware, the only way to prevent botting is with a CAPTCHA.
I don't like CAPTCHAs, mostly because I don't see any way to handle a CAPTCHA verified POST in raw html.
I'll leave it as an open issue for now.

As of 06d2d7a957, one can DDOS the entire thing by just spamming POST's with correctly formatted data. Incorrect POST's shouldn't be an issue simply because of kchan's speed. I'm not sure if this kind of spamming can be handled by an nginx gate or similar. I was thinking of adding a `TardWrangler` struct, which would lazily process POST data, and handle ip timeouts. As far as I'm aware, the only way to prevent botting is with a CAPTCHA. I don't like CAPTCHAs, mostly because I don't see any way to handle a CAPTCHA verified POST in raw html. I'll leave it as an open issue for now.
dawidkubis added the
question
label 2 years ago
dawidkubis added the
enhancement
label 2 years ago
Sign in to join this conversation.
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: dawidkubis/kchan#7
Loading…
There is no content yet.