[Answered] Brute Force Vulnerability

[mellofellow]

I just had a thought.

 

In the forums we are required to post our username, server and domain sometimes.

So if I want to paralyze a site, could I not just attempt a few logins and thereby lock someone out of their account?

 

Is there a feature to reset via one's email (brute force counter not password) or security question that doesn't otherwise bother the admins?

[Shinryuu]

If someone tried that they'd only serve to block their own IP, If multiple people try and fail to access an account multiple times then the account gets locked, but it's only temporary. having the system you mention would be bad because then we'd basically be just as well off without a brute-force system.

[mellofellow]

Should have figured...