I'm the friend who built this.

Happy to answer any questions about the implementation, Gleam/BEAM, the frontend/backend setup, or the load testing.

Let's break it!

Interesting. You are outsourcing DDoS to HN .

If you are just doing basic io on the app, you would need thousands of parallel request hitting the server before it breaks a sweat. Put some CPU bound thing for every request. Then it would be easier to break.