News for hackers. Stuff that matters.
Re:$1.39 for 1000 decoded CAPTCHAs by giltotherescue on Friday April 22, 2011 @06:31PM (#2475656)
Another method is to pause for an exponential delay after each failed attempt. This makes it prohibitively slow to brute force.
Re:$1.39 for 1000 decoded CAPTCHAs by jhc on Friday April 22, 2011 @09:53PM (#2476040)
The benefit of the captcha method is that your account can't be DOSed -- the legitimate user can still get in by entering one captcha, which is much better than, say, having to wait for an hour.