5 ms·
Actually the fastest possible way to detect unknows breaches on the user side is to show your last login time. (On the server side is looking for IP patterns)
by andi999 6y ago
Actually the fastest possible way to detect unknows breaches on the user side is to show your last login time. (On the server side is looking for IP patterns)
- slaymaker1907 6y agoI think approximate location would be a good idea too. I wouldn't remember the last time I logged in to many important services since I do it so often. Relatedly, I have trouble remembering when I paid for so something so just looking at my banking log for fraud requires me to see who the payment actually goes out to.
- millerm 6y agoUnfortunately, a lot of us are using VPNs now. So, location isn't a very good indicator as that would provide a lot of false positives. That actually happened to me recently, and I though "Oh yeah, I was using a VPN then." So, that indicator is just getting worse as I use a VPN on my phone all the time now.
- deleted 6y ago[deleted]
- crazygringo 6y agoIn theory, but in practice some accounts are only rarely accessed by their intended user (might not log in for months at a time). And on the flip side, it's really easy to ignore the displayed last log-in time/IP/location altogether.
- charcircuit 6y agoAttackers can easily mitigate this by using residential proxies.