that sounds fairly stupid.  mts did this right:  with each failure, the 
password checker adds a little more delay into its response.  and of course, 
logging failures (and success!) is fundamental to any security architecture.

        peter


Reply via email to