News for hackers. Stuff that matters.

A comment on Google's Captcha in Firefox vs. in Chrome. Parent comment

Re:Google's Captcha in Firefox vs. in Chrome by LaGrange on Tuesday June 11, 2019 @12:43AM (#20153060)
> By the account. 3 failed login attempts in a row, and you disallow further logins for 30 seconds.

...congratulations, I just locked out all of your users. Have a nice day.

[ Parent | on HN ]
Re:Google's Captcha in Firefox vs. in Chrome by Kaiyou on Tuesday June 11, 2019 @06:35AM (#20154254)
How did you get the email addresses of all my users, which are used as login name?
[ Parent | on HN ]
Re:Google's Captcha in Firefox vs. in Chrome by LaGrange on Friday June 14, 2019 @03:49PM (#20186133)
From that messed up email from support that leaked them. Or I assumed that you'll have a big cross-section with some other site that leaked.

This is not theory, this is hard-earned experience. Locking-out people is bad, the most that's acceptable is rate limiting to a once every few seconds.

[ Parent | on HN ]