• baru@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    8 months ago

    An artificial delay should discourage flood attacks.

    You didn’t explain how. It doesn’t matter to wait a little bit. It’s not like they’re using only one connection and one account.

    It’s also not clear to me how waiting longer suddenly charged how easy it is to detect bots.

    • shortwavesurfer
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      8 months ago

      Well, you have to limit the number of accounts they can possibly have by whatever method possible, either by charging per account or some sort of proof of work or phone number verification or something that limits the amount of accounts that they can have. Once you have done that, what you need to do is cost them something such as how proof of work costs computing resources. If it takes 10 seconds to post a tweet, then sending out 1 million tweets takes 1 million times 10 seconds or 10 million seconds, or 166,666 minutes or 2777 hours or 115.7 days And that’s all from a 10 second Proof of work requirement. For a regular user, that’s not a problem. For a spammer, that’s a huge problem.

      • joewilliams007@kbin.melroy.org
        link
        fedilink
        arrow-up
        1
        ·
        8 months ago

        What your talking about is rate limiting. And pretty much every social media already does that. The issue with adding requirements like phone number etc, is that it also makes it more difficult and annoying for regular users. Besides, bot account owners litteraly have large amounts of fake valid mobile phone numbers they can use to “verify” their bot accounts. Then they also use change their ip addresses, so rate limiting can’t be enforced. Instagram also has a massive bot issue, but its just an endless amount of bot accounts, not just one that is spamming all over the place.

        Adding a fake 10 second delay would stop absolutely nothing and make the experience even worse for regular users.