undefined | Better HN

0 pointsim3w1l11y ago0 comments

A site I know allows 5 login attempts per hour. That seems plenty for legitimate purposes. I've never heard anyone complain.

0 comments

2 comments · 1 top-level

warmwaffles11y ago· 1 in thread

But it doesn't matter if they keep hitting their service with a list of known emails and then sending bogus passwords, 5 times per email per host.

im3w1lOP11y ago

Sorry for late reply. It was 5 attempts per hour per ip. Not per email.

j / k navigate · click thread line to collapse