3 ms·
It will cost server resources for the attacker. It's not just waiting, it needs to actually solve the problem.
by Kiro 6y ago
It will cost server resources for the attacker. It's not just waiting, it needs to actually solve the problem.
- luckylion 6y agoUnless you make it very expensive (which would turn legitimate users away, because they don't want to wait for a minute to sign up), that won't help, I think. You tie up a core for 5 seconds, but the server has 12 of those, so they can create 12 accounts every 5 seconds => still too much to handle in moderation.
- zaarn 6y agoIt's 12 accounts per second instead of 600 per second if it only takes 1 second. Or 1200 if it takes half a second. That is still an improvement.