Re: Intel Corporation, Express 550F Switch unlimited password attempts]

[dtrammell () CAUTECH COM (Dustin D. Trammell)]

David Schwartz wrote:

>         As for whether breaking connections after a fixed number of tries is
> a good idea, I don't believe it is. It's no harder to write a program to try 1000
> passwords on one connection than it is to write one to try one password,
> disconnect, and repeat. So how would that provide any protection against
> brute force attacks?

It doesn't, although it does increase the amount of time it takes for
the brute force attack to be successful, which can be a deterring factor
when you have, say, a slower network link and are forced to
connect/disconnect for every password attempt.

--
Dustin D. Trammell
Security Analyst
CAU Technologies, Inc.