Timeline for How are short passwords not safe if you limit the number of attempts?
Current License: CC BY-SA 4.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 14, 2020 at 21:54 | vote | accept | Alex | ||
| Dec 23, 2019 at 23:06 | comment | added | tklodd | @MechMK1 Most proper lockout systems prevent bots from locking out legitimate users by only blacklisting a user at a specific ip address. That is the way to do it. | |
| Dec 23, 2019 at 18:32 | comment | added | Jared Smith | You are making an extremely common mistake: you are focusing on attacks that you envision rather than on ones people actually use. Asking the question here is a good step towards learning about the specifics of this instance but please don't neglect the meta-realization. | |
| Dec 23, 2019 at 5:44 | review | Suggested edits | |||
| Dec 23, 2019 at 9:05 | |||||
| Dec 22, 2019 at 20:46 | history | edited | schroeder♦ | CC BY-SA 4.0 |
added 3 characters in body; edited title
|
| Dec 22, 2019 at 17:26 | comment | added | Bakuriu | 3-4 attempts per user. They can set up a botnet that will try easy passwords to millions of accounts. If people use short password the chances of getting one right are extremely high. | |
| Dec 22, 2019 at 16:08 | comment | added | Mast | For the record: 8 characters is not a long password today. | |
| Dec 22, 2019 at 6:00 | history | tweeted | twitter.com/StackSecurity/status/1208628397297016833 | ||
| Dec 21, 2019 at 18:17 | history | became hot network question | |||
| Dec 21, 2019 at 13:33 | answer | added | Anders | timeline score: 75 | |
| Dec 21, 2019 at 10:33 | answer | added | F. Hauri - Give Up GitHub | timeline score: 36 | |
| Dec 21, 2019 at 10:18 | answer | added | paj28 | timeline score: 9 | |
| Dec 21, 2019 at 10:05 | comment | added | user163495 | You assume that blindly typing the password into gmail's interface is the only way to log you in. Furthermore, locking an account after X attempts means I could write a script that automatically tries to log in as you and you could never use gmail ever again. | |
| Dec 21, 2019 at 10:03 | history | asked | Alex | CC BY-SA 4.0 |