Slog DOS attack potential: FTP for fact upload?

[kmicinski]

I worry Slog's FTP fact upload feature is easily abused. Can we secure it? Here is what I am thinking: each time the user wants to upload facts, they must first send a message to the server. The server then sends them back a one-time login link (or maybe the FTP server is just keyed to their same password?), and the FTP server is hard-limited in some way to using only some limit on the disc space. Maybe, just for an initial cut, we could skip limits and just enforce that users must be authorized before they upload any facts. Do we support that now?