Brute force protection

@memes

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 years ago (2 children)

How does that stop a brute force attack? As written, it only stops the single luckiest brute force attack that happens to get the password right on their first try.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 2 years ago

    You can't really prevent a brute force attack. Even if you prevent it from one IP or so, you can still do "distributed" brute force attacks.

    Also only allowing one password per 5 seconds or so per IP will not work if you have lots of users and they are at work and have the same IP.

  • source
  • parent