On: Why aren’t we using SSH for everything?

[smellf]

Jerks are also piping /dev/random into it, looks like that may be crashing it.

[verroq → smellf]

I guess we can't use ssh for everything.

[Cpoll → verroq]

That's not ssh's fault; you can pipe /dev/random into just about anything and get the same result. Rate-limiting isn't the job of the protocol, in this case - it's the job of the chat server application.

[dvanduzer → verroq]

The lesson is that you can't authorize indiscriminate access to public services on the internet for single-factor authenticated users.

edit: Ugh, Wordy. Shorter: Identity is more than a public key.

[mikeash → dvanduzer]

Also, security is more than identity. You still need to be robust against malicious input even if you know exactly who all your users are.

[dvanduzer → mikeash]

Indeed. The third leg that solves this problem is known to the industry as Accounting.