Marc Weber wrote:

> I've introduced a total limit of 500 POST requests within 4h which is
> slightly more than POST requests happen within 24h on an average day
> (380 posts in 24h)
> 
> Thus if a bot uses multiple IPs, he should still fail soon
> (unfortunately everybody else, too) - I think its more importatnt to
> protect against attacks in these cases.. Because we don't want to delete
> that many scripts and user accounts.
> 
> I hope vim.sf.net is much safer now. I don't have any additional ideas.
> So let me know whether you think these changes are appropriate.

Thanks for doing this!

I think we can be rather strict.  If a human is doing a lot of work, we
can ask him to try again in 4 hours.  And send us a message that this
happened, so that we can tune the limit.  Perhaps for specific cases.

Please send me a diff of the changes you made (or the new files)
privately.  Otherwise a sync from my side might overwrite your changes.
Cc John Beckett, he is also keeping an eye on things.


-- 
hundred-and-one symptoms of being an internet addict:
255. You work for a newspaper and your editor asks you to write an
     article about Internet addiction...in the "first person."

 /// Bram Moolenaar -- b...@moolenaar.net -- http://www.Moolenaar.net   \\\
///        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
\\\  an exciting new programming language -- http://www.Zimbu.org        ///
 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups 
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to vim_dev+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Raspunde prin e-mail lui