3 ms·
You can then use this lockout for a denial of service attack.
by krallja 12y ago
You can then use this lockout for a denial of service attack.
- brey 12y agooh no ... I am unable to change my (perfectly secure) password for ten minutes because an attacker is attempting to brute force my password reset. I'd regard that as a feature, not a bug. you don't need to lock out the entire account.