> Rate-limit login and comment POST requests even harder. Ban IPs that exceed the amount
Don't ban IPs. Or if you do, let the ban expire relatively quickly (days/weeks, not months/years).
Don't ban IPs. Or if you do, let the ban expire relatively quickly (days/weeks, not months/years).
Or instead of strictly rate limiting, ask them a question that can't be "looked up" in a table and that requires human thought, philosophy, emotion, ethics. Maybe GPT could eventually adapt to this and in that case fall back to IP rate limiting and grow the set of questions.
You may be fine with banning those VPN users, or even want that - lots of bots will try to hide behind "legitimate" VPNs - but one has to be aware of this consequence at least, especially considering that more and more people seem to use them - probably also thanks to the aggressive "sponsoring" certain providers such as ExpressVPN do on e.g. a wide variety youtube videos.