1017
Brute force protection
(rytter.me)
Brute force protection
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 13 Mar 2024
1017 points (96.9% liked)
Memes
45549 readers
1970 users here now
Rules:
- Be civil and nice.
- Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.
founded 5 years ago
MODERATORS
Won't protect against an offline attack (just will confuse the hell out of the hacker) but might confound an online attack? Until someone gets wise and runs the tool a second time. Loving the chaotic neutral vibes here.
It doesn't really even protect against online attacks though. Like, if you're going through a list of known accounts, by definition it won't be any of those accounts' first time logging in, right?
And if you're not going through a list of known accounts, good luck getting anywhere with your attack any time this millennia
This would be per session, not lifetime.
This makes it even more cursed
Function naming could use some work then, it's not obvious that
isFirstLoginAttemptwould be session-aware.Sorry, I'll stop being pedantic now