Simon Willison’s Weblog

Subscribe

Posts tagged security in Jan, 2004

Filters: Year: 2004 × Month: Jan × security × Sorted by date

Defending web applications against dictionary attacks

Over at Reflective Surface, Ronaldo M. Ferraz discusses the usability of an authentication system that locks down an account for a certain period of time after three failed login attempts. Ronaldo sees this as a trade off between usability and security, but I see it more as an added security issue in that it allows malicious third parties to lock other user’s accounts armed only with their username.

[... 398 words]

non-consensual http user tracking using caches. Interesting security issue involving HTTP caching headers

# 20th January 2004, 10:37 pm / caching, privacy, security