Full Disclosure: Re: What the f*** is going on?

[coderman <coderman () gmail com>]

On Thu, Feb 24, 2011 at 8:24 AM, jf <jf () ownco net> wrote:
> ... how come no one ever points out that rate-limiting failed logins is probably more important than password 
> complexity?

this is only true for remote attackers hitting network service auth.

better to assume they've got your hashes and you're racing the
rainbows, dicts, and CUDAs for longevity...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/