Re: Slowing brute force attack

2003-08-03 Thread Andy Jackman
David, Is it possible to cause the client to wait by the server issuing a SLEEP? What if the client just disconnectes and immeadiately reconnects? Say you use a sleep of 2 seconds. If your server can accept 100 connections at once then 1 client can issue 100 login attempts and wait 2 seconds for th

Slowing brute force attack

2003-08-03 Thread David Garamond
Is there an option for mysqld to add a sleep() call after each failed connection request, before reporting to the client (to slow down brute force attack)? I glanced at the manual and there doesn't seem to be one. If there isn't, would it be a good idea? If yes, I could probably submit a patch.