3 ms·
They could block whatever location the fake account was accessed from, but the attacker could try one account each from lots of different locations (perhaps thr
by dmoney 17y ago
They could block whatever location the fake account was accessed from, but the attacker could try one account each from lots of different locations (perhaps through a botnet). For this to be useful the bank would have to lock all account access from everywhere when a fake one was accessed.
- calcnerd256 17y agoat which point the only thing to say is "denial of service"
- staticshock 17y agoAdditionally, the mined usernames / passwords could still be used to brute force other banking / credit card web sites.