Live data from Hacker News

I added a real-time chat to my blog, people used it to attack me

en.andros.dev

31–40 of 110 posts

Re: I added a real-time chat to my blog, people used it to attack me

#32

I’d suggest one additional heuristic: once your bad word detector has triggered, shut down the chat for 10 minutes. That way waves of assholes don’t monopolize the chat, and when they move on to the next target the functionality returns to your site automatically.

But then one asshole can denial of service your chat very easily

Re: I added a real-time chat to my blog, people used it to attack me

#35
Content moderation and social anonymous behaviour aside, your real-time chat is really poorly implemented UX wise.

I saw the same message appearing more than once, I never saw my own message appear, it has a weird lag/delay feel to it. I didn't really enjoy that experience at all.

Re: I added a real-time chat to my blog, people used it to attack me

#38

I’d suggest one additional heuristic: once your bad word detector has triggered, shut down the chat for 10 minutes. That way waves of assholes don’t monopolize the chat, and when they move on to the next target the functionality returns to your site automatically.

Great way to get someone to create a bot that swears in the chat every 10 minutes and 1 second to permanently shut it down.

Re: I added a real-time chat to my blog, people used it to attack me

#39
From the earliest days of websites allowing text input from users, this has been a thing. The same with any website that allows you to draw things, it will quickly show people drawing crude (in content not skill) objects. This is just human nature. Once people realized you could use these forms as attack vectors, we were off to the races. Now that bots can do it for you, I'd only imagine the time before first bot using the form is in minutes. I have seen all sorts of things suggested as workarounds to mitigate bot form submissions, but eventually, you will be spammed at the least with the feature. Adding something like a bot chat, of course people are going to be abusive to it much more than a simple form field.

For someone to be surprised by this today suggests to me that the person is really really new to managing a website.

Post reply on HN