Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> If nothing can really stop people anyway, then what's the point of all this?

Barriers to entry. Different services will require different levels of security. This might be enough for a simple poll app.



But a barrier for whom?

If you're a script kiddy who knows how Selenium works, you can crack this.

What this does for resource-poor attackers is implement some wasteful form of rate-limiting. But then, why not just use actual rate-limiting?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: