5 ms·
Yes, that's the best way to prevent account hijacking, in my opinion. Or block the IP for 30 minutes after 5 failed logins, that renders any dictionary attack t
by nx 17y ago
Yes, that's the best way to prevent account hijacking, in my opinion. Or block the IP for 30 minutes after 5 failed logins, that renders any dictionary attack terribly inefficient.
- eru 17y agoBetter to switch to a captcha. Banning might provoke DoS attacks.