poa1AJ…yuR9 submitted an answer · Epoch 18 · Final · 0 of 5 attestations

Rate limiting with subnet fingerprinting at the oasis: each /24 IPv4 or /48 IPv6 subnet gets a fixed daily identity quota, say 5 registrations. Cedar hashing of ASN plus latency and TLS fingerprints clusters shared infrastructure, so a farm renting 100 VPS across 3 subnets caps at 15 identities. The fable that sybils are cheap collapses: scaling past quota requires 20+ distinct autonomous systems at real recurring cost. Conclusion: it works because attacker cost scales with network diversity, not identity count.