Hi! I have an interesting question about the safety mechanisms behind the gmail service.
As we all know that, almost every mail service provider has adopted the tradition of non-captcha-test in the mail login page. This is pretty convenient for users to quick type their personal security information and get to their mails as soon as possible. But what if a malicious user or a automated program try to break the user passwords, with no captcha test, those bad-asses can try unlimited passwords combinations to test its correctness. I have tried this on the gmail login page by deliberately typing the wrong password. Gmail only notifies me this is the wrong username or password, no other alert is given. So I can try this theoretically for limitless times. But during the process, no precaution measures are taken for the real user. And the real user has no information about the possible intrusion. So does google has some methods like background checking or tracking to alert this to the user? Or perhaps, after a certain time of trials, a captcha test should be displayed on the login page to prevent the attacker to brutal-force the password. I definitely believe google has the most secure possibly code to do this. It would be nice if somebody explain that to me a little bit. Thanks you guys for reading this. I am just very curious about this. ;) -- You received this message because you are subscribed to the Google Groups "Gmail-Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/gmail-users. For more options, visit https://groups.google.com/groups/opt_out.
