4 ms·
A better comparison function: Variable time until some threshold number of repeat failures occurs (e.g. 3). After this, manipulate the comparison time in such
by bloaf 14y ago
A better comparison function:
Variable time until some threshold number of repeat failures occurs (e.g. 3). After this, manipulate the comparison time in such a manner that someone attempting to do this sort of attack would come up with a dummy password. If they come up with said dummy password, alert the user of an attempted attack.
- krickle 14y agoCool idea, but remember the botnets. I also am not sure what we gain by verifying their class of attempt if we're already defending against it.