In response, we implemented a shadow ban: On the surface, the attackers continued to receive a 200 HTTP response code, but behind the scenes we simply stopped sending document invitations after they exceeded the rate limit.
And right there they broke the service for legitimate users. Totally unacceptable collateral damage IMHO.
And right there they broke the service for legitimate users. Totally unacceptable collateral damage IMHO.