4 ms·
If there's a leak of valid usernames or email addresses, for a system that has a few million users, that has a lockout after 10 wrong guesses, then you could ga
by rrrrrrrrrrrryan 5y ago
If there's a leak of valid usernames or email addresses, for a system that has a few million users, that has a lockout after 10 wrong guesses, then you could gain access to one account for every 10,000 lockouts.
- seba_dos1 5y ago> leak of valid usernames or email addresses ...and passwords, because OTP is the second factor.