set bound on online dictionary attacks on weave password #837
Comments
rade
added a commit
to rade/weave
that referenced
this issue
Jun 3, 2015
The main purpose of this is to set an upper bound on the rate at which an attacker might execute a brute force attack on the weave password. No need to get clever or precise here. Closes weaveworks#837.
rade
added a commit
to rade/weave
that referenced
this issue
Jun 4, 2015
The main purpose of this is to set an upper bound on the rate at which an attacker might execute a brute force attack on the weave password. No need to get clever or precise here. Closes weaveworks#837.
rade
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Extracted from #641 (comment)
No need to get fancy here, implementing any sort of complicated rate limiting logic, or aiming for precision. A simple sleep between accepts should do the trick.
The text was updated successfully, but these errors were encountered: