rot13xor

If the patents are legitimate it seems like a business model similar to debt collectors or "cash now for annuity" companies. A small company might have a winnable case of damages but doesn't have the resources or risk appetite to take the case to trial. It's a rational decision to sell off the claim to another company for X% of the expected value and let them take risk of enforcing the claim.

This email thread from Linus might be interesting: https://yarchive.net/comp/linux/cmov.html

The attacker would start out with a targeted user's email or login to the site. A personal email address usually is usually public. Start the password recovery process. Use a botnet to try different shortened links. A rate limit on password reset for an account would help if the attacker had low probability of success before the reset link expired, but the attacker can cycle between multiple target accounts.

Same with x86. Even modern x86 CPUs boots in real mode so you can run a baremetal 8086 binary from the 1980s.

I thought these type of interpreters ran in the user's browser. Cross-compile the interpreter to JS or webasm, stream it to the user after they click on which language to use. Built-in libraries could be streamed on-demand the same way or they can be bundled with the interpreter. It would solve the scalability and security problem.