By: EdTech Security Archive
Modern Blooket uses Cloudflare protection, WebSockets instead of simple HTTP joins, and mandatory token authentication. The "2021" flooders relied on the old API v1, which has been deprecated. blooket bot flooder 2021
This happened thousands of times per day in 2021. The Blooket developers (Ben and Kyle) had a rough 2021. They were a small team. The bot flooders forced them to pivot from adding fun features to adding security features. By: EdTech Security Archive Modern Blooket uses Cloudflare
For students, it is a memory of laughter and chaos. For teachers, it is a memory of frustration. For cybersecurity experts, it is a reminder that any online service, even a quiz game for kids, is vulnerable to volume-based attacks. WebSockets instead of simple HTTP joins
October 2023 (Retrospective Analysis) Focus Period: 2021