Re: Off-topic concerning a web vote debacle

Florian Hars <[email protected]> Mon, 17 Mar 2008 17:53:09 +0100
Newsgroups gmane.comp.apache.mod-survey.general
Message-ID <[email protected]>
Joel Palmius schrieb:
> However to avoid scripted attacks, a server-side key would be
> stored (a hash based on the combination of browser string and and the IP
> number)

How does that help against

for i in $(seq 1000 2000); do
  for j in $(seq 4000 5000); do
    wget --user-agent="Mozilla/4.0 (compatible; MSIE 7.0; TOB 6.05; Windows NT 5.1; .NET CLR 2.0.4$i; .NET CLR 3.0.0$j.30; .NET CLR 1.1.4322)" \
         --post-data=whatever http://example.com/survey/whatever
  done
done

- Florian
Skickat av Florian Hars <[email protected]>
till survey-discussion