Re: login sleeps too long on incorrect logins...

["Denis A. Doroshenko" <d.doroshenko@omnitel.net>]

so what? it's random in range 1..3 seconds. but at the same time
crypt(3) takes less than 0.2 seconds. so login on wrong usernames login
sleeps for 5 times more than on good usernames. that's the thing to
consider. if you talk about delaying agains brute force login does it no
matter good or bad username is.

On Mon, Jun 04, 2001 at 11:11:34AM -0300, Daniel Grunblatt wrote:
> No pal, it's a random time.
> 

-- 
Denis A. Doroshenko  [GPRS/IN/WAP, VAS group engineer] .-.        _|_  |
[Omnitel Ltd., T.Sevcenkos st. 25, Vilnius, Lithuania] | | _ _  _ .| _ |
[Phone: +370 9863486 E-mail: d.doroshenko@omnitel.net] |_|| | || |||(/_|_