search

anyx / LoginGateBundle

59 stars 23 forks source link

Protect against Distributed Brute Force Attacks #31

Open plusdepseudo opened 3 years ago

plusdepseudo commented 3 years ago

Hi, This is described in "PART VII: Distributed Brute Force Attacks" here https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication

Regards

anyx commented 3 years ago

Hi @plusdepseudo Can you please describe, what exactly probleme do you have?

plusdepseudo commented 3 years ago

Hi Aleksandr, Sorry my message was a bit light indeed. It’s not a problem but a proposal for a new feature. As explained in the link I provided attacks are now mainly distributed. An attacker will try a given password on several users instead of several passwords on one user which is actually covered by your bundle. I think such feature would be great in your bundle :)

Le 27 oct. 2020 à 19:06, Aleksandr Klimenkov notifications@github.com a écrit :

 Hi @plusdepseudo Can you please describe, what exactly probleme do you have?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

anyx commented 3 years ago

Oh, I see. Need to think about this. You are welcome to send pr with this feature)