Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is so cool...

But did you think of security? To prevent automation for example?



Yeah, on TrailBehind.com proper, I have an auth system in place, and a bit of javascript to let users log in mid-action.

For this demo, there is no auth, so a bot could definitely spam it, but it will work ok on your site if you have some sort of auth set up.

Later, I also want to integrate captcha with this, and I'll release my login ajax as an add-on.


It would be so cool if you keep allowing users to comment without login... or even with their Facebook account - Connect.

You can work around this to prevent automation, by IP detection... like each IP can't submit more than 10 comments in an hour at the same domain name, and such similar techniques.

You can distrebute it, to let anyone use it at their websites.


yeah, maybe if you added in a comment rating system, or at least a spam button, it could sort itself out.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: