zlacker

[return to "Twitter Is DDOSing Itself"]
1. arter4+ab[view] [source] 2023-07-01 19:15:11
>>ZacnyL+(OP)
This is interesting.

Judging from the screenshot, a huge amount of GET /TweetDetail is generated which triggers some rate limiting, as shown by the 429.

If this is indeed due to the recent decision to enforce authentication for all API calls, it means the curlprit may actually be the API gateway or something similar downstream.

Also, this behavior seem to never stop, which isn't what one would expect from an exponential backoff retry.

I don't claim to be a better engineer than the folks working at Twitter, but it is interesting to see something like this in the wild, all Musk-related considerations aside.

◧◩
2. Quarre+yr[view] [source] 2023-07-01 20:40:13
>>arter4+ab
I would guess the front end was written under the assumption that the back end would still work without auth. Perhaps the backend changes (mandatory auth + rate limiting) were pushed without sufficient testing of the front + back?
[go to top]