106 ms·
Even if it doesn't solve the problem, seems like it would help. In this case, a user would need to have a "very weak" password to be compromised. "Somewhat we
by roundsquare 17y ago
Even if it doesn't solve the problem, seems like it would help. In this case, a user would need to have a "very weak" password to be compromised. "Somewhat weak" passwords would be fine.
Also, after 100 or so attempts to login, I would thinking locking the user out would be fine (at least in many systems).
- Retric 17y agoThat recreates the ability to lock people out of the system once you know their user ID. Edit: However, a useful option is to force people to use a captia after a few bad atempts.