Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

New answers tagged

2 votes
Accepted

How do you rate limit bruteforce attempts on a Tor hidden service?

When the brute force attacks happens in a slow manner, there is not much you can do. The situation is here quite similar to a non-Tor site. If the attacker uses some tools which is similar to a DoS ...
qbi's user avatar
  • 1,681
0 votes

How do you rate limit bruteforce attempts on a Tor hidden service?

You cannot ban wrongdoers by IP address but there are still things you can do by fingerprinting bad traffic. If you are under attack you will want to drop bad connections early, for instance at ...
Kate's user avatar
  • 8,345
0 votes

How do you rate limit bruteforce attempts on a Tor hidden service?

You cannot do this at the network level since at this level you don't know if the user is authenticated or not. But at the application level you have this information, for example authenticated are ...
Steffen Ullrich's user avatar
1 vote

How do you rate limit bruteforce attempts on a Tor hidden service?

Your options are very limited. You obviously cannot use visitor's IP because it isn't the visitor's IP. If the user is using Tor Browser, you cannot fingerprint the client browser either, because they ...
ThoriumBR's user avatar
  • 54.4k

Top 50 recent answers are included