pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Ron <ronljohnsonjr@gmail.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: User to get locked after three wrong login attempts.
Date: Wed, 5 Sep 2018 17:18:38 -0500
Message-ID: <1ea8bec3-1d0b-b69f-cbc0-c936860696f4@gmail.com> (raw)
In-Reply-To: <CAFwQ8rerOUEptWfbtrVusBTMqsEcTqDbnN6Q+O+o-49mmTUPqw@mail.gmail.com>
References: <CAHnVB4C9tSJkD4Ysd645HJmJjWzNYKJgUumE74YY8FRjUFJE4g@mail.gmail.com>
	<30655.1536069964@sss.pgh.pa.us>
	<20180905174832.GO4184@tamriel.snowman.net>
	<87va7j61g2.fsf@gmail.com>
	<CAFwQ8rerOUEptWfbtrVusBTMqsEcTqDbnN6Q+O+o-49mmTUPqw@mail.gmail.com>

On 09/05/2018 05:14 PM, Craig James wrote:
[snip]
> To elaborate, you should explain to the auditor that this introduces a 
> huge denial-of-service vulnerability into your system. Anyone can start 
> hammering on everyone else's accounts, and with a fairly trivial script, 
> lock the entire company out of all accounts. This is a terrible idea.

And be tracked down (relatively) quickly.

-- 
Angular momentum makes the world go 'round.

view thread (9+ messages)  latest in thread

Message-ID: <1ea8bec3-1d0b-b69f-cbc0-c936860696f4@gmail.com>
Permalink:  ../1ea8bec3-1d0b-b69f-cbc0-c936860696f4@gmail.com/
Also on:    postgresql.org/message-id/1ea8bec3-1d0b-b69f-cbc0-c936860696f4@gmail.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: User to get locked after three wrong login attempts.
  In-Reply-To: <1ea8bec3-1d0b-b69f-cbc0-c936860696f4@gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox