4 ms·
A /80 prefix is equivalent to 65536 ipv4 Internets. Not so brute-forceble.
by jacob019 5y ago
A /80 prefix is equivalent to 65536 ipv4 Internets. Not so brute-forceble.
- lmz 5y agoThe random part is six digits. I'd say pretty brute-forceable.
- AaronFriel 5y agoThe TOTP spec (rfc6238) allows up to 10 digits or 10 billion unique values, a bit bigger than IPv4's space. Running anything like fail2ban on IP address misses would stop brute forcing in its tracks.
- kadoban 5y agoBoth good ideas. None of this fixes even a passive mitm attack, but it's still better.