I am terribly sorry for self-advertising, but:
I am just now busy building a solution: self-hosted sophisticated rate-limiting.
More complex than nginx, more private than cloudfare. Please joint the waitlist if you want to morally support me ;)
Readit Newslevleontiev commented on We can't have nice things because of AI scrapers blog.metabrainz.org/2025/... · Posted by u/LorenDB
That's why I am building a Rate Limiter as a service.
Seems that it has its niche.
levleontiev commented on XZ backdoor story – Initial analysis securelist.com/xz-backdoo... · Posted by u/kryster
Sorry if I trigger anyone's paranoia, but
1. who told you that it's not a state-backed attack?
2. and if 1 is true, who told it, it's not Russia staying behind it?
and if 2 is true, the KGB university alumni Kaspersky definitely is related to it.
levleontiev commented on You do need a technical co-founder [video] ycombinator.com/blog/why-... · Posted by u/todsacerdoti
This is an interesting idea — variable vesting based on milestones. It would be a great way to reduce risk, though of course there are issues that could arise that would make this complicated. For example, if the technical person vests based on hitting certain product-related goals, does he get penalized if part of the dev team gets hired by another company, which makes it harder for him to hit the milestones? Or for the non-technical cofounder, if the economy goes into a tailspin, and it's much harder to make sales than the cofounders anticipated, should he not vest, even if he's doing everything he can?
But overall, I think this is a really intriguing idea. Points could be assigned for what each founder is bringing to the table (concrete idea, market research, cash), and they would get some vested stock for that. Then the rest of the founder's shares could be put into a pool and vested to particular founders that hit their milestones. You wouldn't want to make it too adversarial, but it's possible the benefits of incentive alignment would overcome the downsides of the zero-sum game thinking that the system could engender.
>does he get penalized if part of the dev team gets hired by another company, which makes it harder for him to hit the milestones?
Of course yes. The part of executive responsibility is to maintain the team and calculate the riscs .
Is it only me who sees BDSM logo here?
levleontiev commented on Meduza co-founder's phone infected with Pegasus meduza.io/en/feature/2023... · Posted by u/Klaster_1
Also interesting that a new “bad guy” from the Caucasus might be the actual attacker.
The problem: one buggy integration, scraper, or infinite retry loop can suddenly explode your API costs or overload infrastructure before anyone notices.
Fairvisor acts as a guardrail in front of your API:
per-tenant and per-route rate limits
request budgets and soft/hard caps
anomaly alerts for sudden spikes
The edge component is open source (OpenResty / Nginx + Lua) and the SaaS part provides policy management and audit.
Still early, validating whether teams would use something like this instead of building internal scripts.
https://github.com/fairvisor/edge