Загрузка видео...

Не удалось загрузить видео

На главную

Someone found our public signup endpoint and scripted it. No rate limit. No CAPTCHA. No email verification gate. 40,000 fake accounts in six hours. Support thought it was a viral moment. It was a bot with a for loop. How do you rate-limit signup without punishing real users?

venkateshdotdev's profile picture

Venkatesh

1,042 subscribers

58,181 просмотров • 16 дней назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

Ever wanted to know how many queries you have left on before getting rate limited? I made a Chrome extension for that: Grok Rate Limit Display Get it here: It shows you how many queries you have left until you have to wait for more, ( and how long you have to wait for)
0:13

Ever wanted to know how many queries you have left on before getting rate limited? I made a Chrome extension for that: Grok Rate Limit Display Get it here: It shows you how many queries you have left until you have to wait for more, ( and how long you have to wait for)

️️️️ ️ᅠ‏️️️️ ️ᅠ️️️️ ️️️️️ ️ᅠ

17,916 просмотров • 9 месяцев назад

🤬Irish teacher Enoch Burke claims his bank account was frozen after he refused to use they/them pronouns for a student — with no prior notice — despite having €40,000 in it. Do you support him suing the bank into oblivion? A. Yes B. No
0:10

🤬Irish teacher Enoch Burke claims his bank account was frozen after he refused to use they/them pronouns for a student — with no prior notice — despite having €40,000 in it. Do you support him suing the bank into oblivion? A. Yes B. No

𝔉🅰𝒏 Karoline Leavitt

11,034 просмотров • 4 месяцев назад

Brad Armstrong has joined the No Limit Soldiers, and I was not prepared to hear him cut a promo about it. #wcw99
0:18

Brad Armstrong has joined the No Limit Soldiers, and I was not prepared to hear him cut a promo about it. #wcw99

Jus⛏in🩸

18,485 просмотров • 15 дней назад

🇺🇸 NO FAKE BULLETS - NO BLANKS You can literally see the bullet impact to the left and above the TSA agents chilling. The bullet was real and you can see it. This addresses everyone claiming this was with fake bullets and a show.
0:11

🇺🇸 NO FAKE BULLETS - NO BLANKS You can literally see the bullet impact to the left and above the TSA agents chilling. The bullet was real and you can see it. This addresses everyone claiming this was with fake bullets and a show.

Lord Bebo

75,657 просмотров • 4 месяцев назад

(body inflation but animated 🎈) no sound it was too difficult Felix gets hit by a mystery dart and inflates to his size limit wth🤨 🫡
0:19

Sensitive content

(body inflation but animated 🎈) no sound it was too difficult Felix gets hit by a mystery dart and inflates to his size limit wth🤨 🫡

🔞 (check pinned for cw)

155,268 просмотров • 1 год назад

A lot of people have been asking how I generated a music video with a realistic character using Dreamina Seedance 2.0 in Dreamina AI . A few hours ago, I was able to generate it using just one character image + audio input, about a 95% success rate, almost no failures. Not sure if it still works now though. Let me know in the comments if you’ve tried it.
0:10

A lot of people have been asking how I generated a music video with a realistic character using Dreamina Seedance 2.0 in Dreamina AI . A few hours ago, I was able to generate it using just one character image + audio input, about a 95% success rate, almost no failures. Not sure if it still works now though. Let me know in the comments if you’ve tried it.

Dinda Prasetyo

13,786 просмотров • 5 месяцев назад

This GitHub repo is gold for anyone using AI without paying a dime. A constantly updated list of 100% free LLM APIs that stay free forever. No expiring credits, no credit cards, no fine print. It covers Google AI Studio, Groq, Cerebras, OpenRouter, NVIDIA NIM, Mistral and dozens more, with exact rate limits and OpenAI SDK compatibility all in one place. 25k stars. Paste any endpoint straight into Cursor or Claude Code and start building without touching billing.
0:17

This GitHub repo is gold for anyone using AI without paying a dime. A constantly updated list of 100% free LLM APIs that stay free forever. No expiring credits, no credit cards, no fine print. It covers Google AI Studio, Groq, Cerebras, OpenRouter, NVIDIA NIM, Mistral and dozens more, with exact rate limits and OpenAI SDK compatibility all in one place. 25k stars. Paste any endpoint straight into Cursor or Claude Code and start building without touching billing.

0xMarioNawfal

107,480 просмотров • 1 месяц назад

OpenCode Go is now wired into Codex!! The pricing is insane. $10 gets you 10,000 DeepSeek requests every 5 hours (no weekly limits). I converted that into DeepSeek API dollars because I thought I was reading it wrong, and the same 5 hours of usage would run somewhere between $10 and $30 depending on how big your context gets. So one afternoon of use already covers the whole sub. It comes with Kimi K3 as well. Both sit in the picker next to my other models now. Next time we hit a limit in the middle of a loop, we can grab it and keep going.
0:17

OpenCode Go is now wired into Codex!! The pricing is insane. $10 gets you 10,000 DeepSeek requests every 5 hours (no weekly limits). I converted that into DeepSeek API dollars because I thought I was reading it wrong, and the same 5 hours of usage would run somewhere between $10 and $30 depending on how big your context gets. So one afternoon of use already covers the whole sub. It comes with Kimi K3 as well. Both sit in the picker next to my other models now. Next time we hit a limit in the middle of a loop, we can grab it and keep going.

Ziwen

431,395 просмотров • 25 дней назад

How to build a requirement in Software Factory. We gave our agent one vague line: "Let users reset their password from the login screen." It returned 5 structured requirements, account-enumeration, rate-limit and token-expiry rules. Try Software Factory's agent experience to help you change, enhance, or build all the context your team needs.
0:17

How to build a requirement in Software Factory. We gave our agent one vague line: "Let users reset their password from the login screen." It returned 5 structured requirements, account-enumeration, rate-limit and token-expiry rules. Try Software Factory's agent experience to help you change, enhance, or build all the context your team needs.

8090

107,438 просмотров • 2 месяцев назад

Harry Kane You tried your best Captain, and for a moment it was really coming home till the ref said no.
0:10

Harry Kane You tried your best Captain, and for a moment it was really coming home till the ref said no.

CR8

43,440 просмотров • 1 месяц назад

THIS IS SO SUSPECT that it would make me not even watch football anymore if I didn’t love it… If I was a newbie or casual, I’d question if this display was as fake as is the scripted outcomes in WWE. There’s no way you can miss this DPI, except on purpose! No, we shouldn’t have ever been in this tight a game with Dallas, but it still doesn’t negate how ridiculous this non-call is! 🤨
0:18

THIS IS SO SUSPECT that it would make me not even watch football anymore if I didn’t love it… If I was a newbie or casual, I’d question if this display was as fake as is the scripted outcomes in WWE. There’s no way you can miss this DPI, except on purpose! No, we shouldn’t have ever been in this tight a game with Dallas, but it still doesn’t negate how ridiculous this non-call is! 🤨

Tazim Wajid Wajed

1,288,241 просмотров • 11 месяцев назад

Play action is the engine of Seattle’s offense. They’re 2nd in run + PA rate (62.8%) and No. 1 in EPA on PA, and it shows. Darnold led the NFL in play-action EPA (+58.8), was 2nd in PA yards (1,560), and completed 80% of PA throws in the red zone with 9 TDs. Take it away, and the whole thing sputters: -27 EPA (23rd), deep ball rate falls off a cliff to 7.2% (29th), and the offense loses its bite. If the Pats can limit the run, the play-action threat lowers.
0:10

Play action is the engine of Seattle’s offense. They’re 2nd in run + PA rate (62.8%) and No. 1 in EPA on PA, and it shows. Darnold led the NFL in play-action EPA (+58.8), was 2nd in PA yards (1,560), and completed 80% of PA throws in the red zone with 9 TDs. Take it away, and the whole thing sputters: -27 EPA (23rd), deep ball rate falls off a cliff to 7.2% (29th), and the offense loses its bite. If the Pats can limit the run, the play-action threat lowers.

Pete Collins

15,144 просмотров • 6 месяцев назад

This was how long the buildup was thought it would’ve been a fake out but no, he did just, stood around and died if he got caught off guard it would’ve been better 😭but no he- announced what he was doing, I get animation doesn’t reflect the verdict but still- #deathbattle
0:13

This was how long the buildup was thought it would’ve been a fake out but no, he did just, stood around and died if he got caught off guard it would’ve been better 😭but no he- announced what he was doing, I get animation doesn’t reflect the verdict but still- #deathbattle

Kyu

163,768 просмотров • 3 месяцев назад

I just found an AI dev tool with no rate limits, no paywall, and it runs on any device—even on a phone. Name: FreeAICode. Price: ₹0 / $0. I couldn’t pass this up 🧵👇
0:11

I just found an AI dev tool with no rate limits, no paywall, and it runs on any device—even on a phone. Name: FreeAICode. Price: ₹0 / $0. I couldn’t pass this up 🧵👇

Chidanand Tripathi

228,714 просмотров • 1 год назад

Shadow traffic proves a candidate is operationally sound. It can't tell you if users like it better. A/B testing belongs at the endpoint, not in your app code. Same endpoint name, API, and keys for your clients. No feature flags, no hash-mod-100 in client code, no spreadsheet explaining what group A vs B means. Split a live endpoint's traffic into one control and up to 20 variants, each with a fixed percentage. Ramp with a single call. Delete the experiment and 100% of traffic returns to the control, with nothing left to unwind. Read the full walkthrough:
0:15

Shadow traffic proves a candidate is operationally sound. It can't tell you if users like it better. A/B testing belongs at the endpoint, not in your app code. Same endpoint name, API, and keys for your clients. No feature flags, no hash-mod-100 in client code, no spreadsheet explaining what group A vs B means. Split a live endpoint's traffic into one control and up to 20 variants, each with a fixed percentage. Ramp with a single call. Delete the experiment and 100% of traffic returns to the control, with nothing left to unwind. Read the full walkthrough:

Together AI

15,317 просмотров • 12 дней назад

You always run into someone in the elevator might as well make it a fit check. No stage. No setup. Just four walls, a mirror, and the drip speaking for itself. The fit doesn't wait for the right moment. It creates it. #ElevatorFit #OutfitCheck #FitCheck #StreetStyleDaily
0:15

You always run into someone in the elevator might as well make it a fit check. No stage. No setup. Just four walls, a mirror, and the drip speaking for itself. The fit doesn't wait for the right moment. It creates it. #ElevatorFit #OutfitCheck #FitCheck #StreetStyleDaily

Candy Samira

13,073 просмотров • 4 месяцев назад

I had to watch this video umpteen times to find out whether it was real or AI. For me, it was a wake-up call: we've reached the point where even people who have a lot to do with AI and work with it no longer know what is real and what is fiction.
0:12

I had to watch this video umpteen times to find out whether it was real or AI. For me, it was a wake-up call: we've reached the point where even people who have a lot to do with AI and work with it no longer know what is real and what is fiction.

Chubby♨️

14,381,670 просмотров • 1 год назад