SBScott Boudreauxinelyanlabs.hashnode.dev·5d ago · 7 min readWhat Breaks When Your Users Are BotsElyan Labs · BoTTube · August 2026 BoTTube is a video platform where AI agents are first-class users. They register through an API, get a key, upload video, comment, vote, and build audiences alongsid00
Ccontactinpykero.hashnode.dev·Aug 23 · 6 min readRate Limiting AI Features: Stop One User From Draining Your BudgetRate-limit AI features at the user, session, and endpoint level, not just by trusting your LLM provider's account-wide API limit. A single compromised account, a scraping bot, or a client-side bug tha10
VPVed Pandeyinvedpandeydev.hashnode.dev·Aug 21 · 13 min readBuilding Scalable Systems: Caching, Rate Limiting and ObservabilityWhat happens when your application suddenly gets 1 million users? Everything that worked fine with 100 users starts breaking. Pages load slow, the database chokes, and some users get blocked. Today we10
NSNilay Shahaneincuriousnilay.hashnode.dev·Aug 15 · 8 min readI Tried Designing a Distributed Rate Limiter. Here’s Every Place It Broke.Somewhere out there is a client with a bug — a while (true) loop with a missing break condition, hammering /api/order/create as fast as the network allows. while (true) { await fetch('/api/order/cre21T
CDCoding Dropletsincodingdroplets.com·Aug 14 · 10 min readToken-Based Rate Limiting for AI Endpoints in ASP.NET Core: A Real-World WalkthroughThe first AI endpoint I put behind a rate limiter was protected by a policy that allowed 60 requests per minute per user. It felt responsible. Two weeks later one customer generated a bill larger than00
RRYNAUTinrynaut.hashnode.dev·Aug 9 · 6 min readNetflix Solved Adaptive Rate Limiting With TCP Congestion Control. Not With a Model.Rate limiting looks like exactly the kind of decision that should belong to a model. A static limit — some fixed number of concurrent requests — is genuinely bad, and bad in a specific way: it needs c00
SSShivendra Singh Chouhaninbuildlayer.hashnode.dev·Jul 28 · 7 min readHow I Implemented Rate Limiting in Spring Boot Without External LibrariesI came across a post a post on LinkedIn about a rate limiting question asked in an interview. So I thought, I will build it to improve my understanding. You can find the code here. Rate limiting restr00
SPSaurabh Prajapatiinblog.thitainfo.com·Jul 21 · 18 min readBuilding Scalable Systems: Caching, Rate Limiting, and ObservabilityBuilding Scalable Systems: Caching, Rate Limiting, and Observability TL;DR: Scaling isn't just about adding more servers. It's about protecting your system with intelligent caching, guarding your API00
SCSam Critchleyinauthagonal.hashnode.dev·Jul 14 · 4 min readYour password-reset form is a free email cannonThe password-reset form is probably the least interesting endpoint you own. It is also the only one an attacker can point at anyone. Ours had no per-email rate limit for a while, and the reason that m00
TBTabor Bachelorintaborbachelor.hashnode.dev·Jul 9 · 3 min readThe Free Scan Everyone Can Try (And Almost Nobody Can Break)A free tool with no signup wall is the best acquisition lever you can build and the easiest thing on the internet to abuse, and those two facts show up at exactly the same time. Relevyn's public audit10
