XPost: comp.mobile.android, alt.privacy   
   From: suzyw0ng@outlook.com   
      
   Alan Browne wrote:   
   > On 2024-07-06 19:28, Mickey D wrote:   
   >>   
   >> "Threat actors could exploit the RockYou2024 password compilation to   
   >> conduct brute-force attacks and gain unauthorized access to various   
   >> online   
   >> accounts used by individuals who employ passwords included in the   
   >> dataset,"   
   >> the team explained.   
   >   
   > Why Passkeys should be used wherever financial transactions or sensitive   
   > information are concerned.  Or at least TFA.   
   >   
   > And passwords need to be strong - computer generated is always best.   
   >   
   > Otherwise password access should have time outs.   
   >   
   > 1st time wrong: no delay   
   > 2nd time wrong: 1 s delay   
   > 3rt time wrong: 2 s delay   
   > 4th time wrong: 4 s   
   > 5               8 s   
   >   
   > 10              4 hour delay, then reset to 0 delay.   
   >   
   > Brute force login attacks would simply not work.   
   >   
      
   My car radio had that in 1990s, enter the PIN wrong and delay increased   
   each time.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)