3 ms·
Apparently Sony doesn't really rate-limit logins (say, per IP), leaving their customers open to password bruteforce attempts I'd love to know from someone in t
by mootothemax 15y ago
Apparently Sony doesn't really rate-limit logins (say, per IP), leaving their customers open to password bruteforce attempts
I'd love to know from someone in the business whether bruteforce attempts like this typically come from a single IP, multiple IPs or a unique IP per account break-in attempt. If it's anything but the latter, one would really hope a company as high-profile and as targeted as Sony would be checking more thoroughly for this kind of stuff.
- lawnchair_larry 15y agoIt's usually the same IP brute forcing the same or multiple accounts, but there is no reason that it has to be. It is uncommon to have many hosts brute forcing a single login.