Hacker News Reader

Good idea. Doesn't have to be complex - even java hash code with modulus would work.

These suggestions sound good but the real challenge will be to reliably detect fake logins to not suddently and accidentally mess with your real users..

Easy. Set it up just like a honeypot. Except that instead of being a sticky honeypot, it's poisoned honey they get.

OP mentioned the attack is easily identified so legitimate traffic gets served correctly bad traffic gets "logged in" to the poisoned honeypot. 301 after login perhaps

Reply on news.ycombinator.com