1015
Brute force protection (rytter.me)
submitted 2 years ago by to c/memes@lemmy.ml
103 comments fedilink hide all child comments
 

Brute force protection

@memes

you are viewing a single comment's thread
view the rest of the comments
[–] 103 points 2 years ago (1 child)

The guy coding made it so, on your first attempt, even if you answer correctly, it will tell you your login failed due to incorrect username or password, to joke about how it feels like you always get it wrong on the first try

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 17 points 2 years ago* (2 children)

    The logic is bugging me, though. It should be if isFirstAttempt || !isPasswordCorrect

    I understand the meme is trying to convey in spite of being correct to still return an error, but then it doesn't account for when the password is actually incorrect.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 47 points 2 years ago*

    That defeats the brute-force attack protection…

    The idea is that brute-force attackers will only check each password once, while real users will likely assume they mistyped and retype the same password.

    The code isn’t complete, and has nothing to do with actually incorrect passwords.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 17 points 2 years ago (1 child)

    Like the other person said, it's not meant to always fail the first time you enter any password.

    It is meant to fail the first time you enter the correct password.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •