UBB.Developers Forums General Discussion Chit Chat ubb 6 = easy to hack?

quote:

---

Perhaps it should be, but you're being picky about what's secure and what's not. No site can stand up to a DDOS attack but we'd hardly catergorize it as unsecure because of it.

---

What's so difficult about it? Obviously it would have to be an 'optional feature' (doesn't everything?), but if there are more than 20 or so failed login attempts to a username, the UBB could then refuse to accept login attempts from that IP / to that Username more than once every 30/60 secs. That way, any brute-forcer that's running will be slowed down to a crawl... 1 attempt every 60 seconds? Expect the password to be cracked in a few YEARS...

Either that, or we're doing to have to start distributing those cute little RSA modulo keychains to all users.