Enable login throttling
Thuan · 1 month ago
A common brute-force attack against web applications consists of an attacker submitting a login form many times with the hope of eventually guessing the password of some user account.
One of the best countermeasures to these attacks is called "login throttling", which denies a user from attempting logins after a certain number of failed attempts.
From now on, FastCron allows only 5 login attempts per minute.
Comments
Log in to leave a comment.