Jeff Atwood on limited login attempts: Dictionary Hacks 101
January 24, 2009
Jeff Atwood over at his blog, Coding Horror, gives a little lesson in the reasons why websites should limit their number of login attempts. He uses the recent hacking of Twitter as an example.
“Clearly, the last thing you want to do is give attackers carte blanche to run unlimited login attempts. All it takes is one user with a weak password to provide attackers a toehold in your system. In Twitter’s case, the attackers really hit the jackpot: the user with the weakest password happened to be a member of the Twitter administrative staff.”
Two lessons learned here: websites should limit their login attempts and users should have more secure passwords!
Jeff Atwood on limited login attempts: Dictionary Hacks 101
Jeff Atwood over at his blog, Coding Horror, gives a little lesson in the reasons why websites should limit their number of login attempts. He uses the recent hacking of Twitter as an example.
Two lessons learned here: websites should limit their login attempts and users should have more secure passwords!