Craig, now I understand! I thought they were just trying to use up the
system's resources, not actually try to get into accounts.
Of course, any cracker could try a single password for all accounts, but I
don't think anyone with a lot of egold in his account has a simple password,
so this method i
> From: FileMatrix [mailto:[EMAIL PROTECTED]
> It seems to me that the first thing one does to protect a system from
> automated attacks is to forbid access attempts to the same account
> more than once every x (say 10) seconds.
> This means that even with constant attempt to crack the
> passw
On 15 Sep 2003, at 20:20, FileMatrix wrote:
> But those people can consume E-gold's resources with or without the
> Turing number, just by trying a connection.
Perhaps so. I don't know if they are but I doubt it since the Turing
number eliminated their incentive to do so. In any case it did s
Craig,
But those people can consume E-gold's resources with or without the Turing
number, just by trying a connection. I mean, the system must check for both
the Turing number and password, so, even if the Turing is cracked, the
system still has to check a random password and thus consume resourc
George,
> So, cracking the Turing number is useless (if the system is
> properly secured).
You are missing some history. You see, a couple of years ago people
WERE making automated attacks. These attacks may have been useless; I
certainly never heard of them succeeding in stealing anything by