--- title: "I added a real-time chat to my blog, people used it to attack me" url: https://daily.dev/posts/i-added-a-real-time-chat-to-my-blog-people-used-it-to-attack-me-ozm45316g source_url: https://en.andros.dev/blog/b6c32a90/i-added-a-real-time-chat-to-my-blog-people-used-it-to-attack-me type: article source: "Hacker News" published: 2026-08-06T14:19:14.008Z updated: 2026-08-06T14:19:36.288Z tags: ["security", "webdev", "django"] reading_time: 6 upvotes: 1 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # I added a real-time chat to my blog, people used it to attack me **[Hacker News](https://daily.dev/sources/hn)** · 6 min read · 1 upvotes · 0 comments ## Summary A developer added a simple real-time ephemeral chat widget to their blog, only to have it weaponized when a Tailwind CSS criticism post went viral on Hacker News. Attackers used the chat for insults, impersonation, content flooding, and XSS injection attempts. The author describes the attack types, the countermeasures taken (word filters, character limits, patience), and key lessons: treat every input as hostile, real-time moderation is fundamentally harder than async moderation, and ephemerality reduces troll incentives by removing karma and history. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#webdev](https://daily.dev/tags/webdev), [#django](https://daily.dev/tags/django) [View this post on daily.dev](https://daily.dev/posts/i-added-a-real-time-chat-to-my-blog-people-used-it-to-attack-me-ozm45316g)