4 ms·
You can rate limit individual users but password spray attacks use a large number of accounts to remain undetected in a authentication system used by an even mo
by oezi 3y ago
You can rate limit individual users but password spray attacks use a large number of accounts to remain undetected in a authentication system used by an even more users.
- mattigames 3y agoWe are getting 10000x times the number of wrong passwords than average, I'm sure it's nothing to worry about.
- Towaway69 3y agoIt was a legacy test system connected to a production system so it doesn't count. Obviously. /s
- Jedd 3y ago{rolls eyes} This is precisely the kind of 1990's level basic heuristic that this company cites as part of their Sentinel security system. Trying to excuse a breach by 'the attacker tried a few passwords against lots of different accounts' is not compelling.