[e-gold-list] Re: Cracking the Turing number

2003-09-16 Thread FileMatrix
Craig, now I understand! I thought they were just trying to use up the system's resources, not actually try to get into accounts. Of course, any cracker could try a single password for all accounts, but I don't think anyone with a lot of egold in his account has a simple password, so this method i

[e-gold-list] RE: Cracking the Turing number

2003-09-15 Thread Ian Green
> From: FileMatrix [mailto:[EMAIL PROTECTED] > It seems to me that the first thing one does to protect a system from > automated attacks is to forbid access attempts to the same account > more than once every x (say 10) seconds. > This means that even with constant attempt to crack the > passw

[e-gold-list] Re: Cracking the Turing number

2003-09-15 Thread Craig Spencer
On 15 Sep 2003, at 20:20, FileMatrix wrote: > But those people can consume E-gold's resources with or without the > Turing number, just by trying a connection. Perhaps so. I don't know if they are but I doubt it since the Turing number eliminated their incentive to do so. In any case it did s

[e-gold-list] Re: Cracking the Turing number

2003-09-15 Thread FileMatrix
Craig, But those people can consume E-gold's resources with or without the Turing number, just by trying a connection. I mean, the system must check for both the Turing number and password, so, even if the Turing is cracked, the system still has to check a random password and thus consume resourc

[e-gold-list] Re: Cracking the Turing number

2003-09-15 Thread Craig Spencer
George, > So, cracking the Turing number is useless (if the system is > properly secured). You are missing some history. You see, a couple of years ago people WERE making automated attacks. These attacks may have been useless; I certainly never heard of them succeeding in stealing anything by