4 ms·
Most really strong systems lock an account after a couple of incorrect guesses. I assume this is all for systems that may not be secured to prevent brute force
by ry0ohki 15y ago
Most really strong systems lock an account after a couple of incorrect guesses. I assume this is all for systems that may not be secured to prevent brute force.
- mtogo 15y agoLocking the account is the wrong way to go about it since it makes DoS on known accounts trivial. Blocking the IP or an increasing time between tries is, afaik, the "right way".