search

adambutler / poll

Voting done simply in real-time
http://poll.lab.io
MIT License
169 stars 54 forks source link

Voting should be rate-limited #4

Open adambutler opened 10 years ago

adambutler commented 10 years ago

Voting is easily venerable to being hit by a single user by deleting cookies.

Change of vote should not be limited Creation of new vote should be limited to 1 new vote per minute

adambutler commented 10 years ago

As I have been implementing this I realise that this possibly causes more issues for regular users. As far as I know I can only identify a user by their IP address. This would mean that a group of people on the same network could not create new votes at the same time without hitting the rate limit.

An alternative would be to implement something similar to pantopticlick but this could easily be spoofed by a bot therefor making the implementation worthless.

It would be good to get ideas from anyone who stumbles upon this issue.