>>707120982
>you mean this shit?
No dumbo, I mean a limit to amount of sign-ins on a given IP. Let's be ultra generous and say 10 sign-in attempts before the IP is temporarily banned. Then the "cracker" switches to a different IP. He still needs 268 million attempts to crack ONE password of 11 characters. That's 26 million required proxies/IPs in his arsenal. If you have access to that, you can do a lot smarter stuff than just try to bruteforce a single password.
Not to mention that a password of 20 characters would just completely ruin any chance at the whole thing, and if you don't know how long the password is, it's not worth the risk.

>the requests still hit the login endpoints, which is what corpos don't want
Yeah well deal with it. If someone wants to DDOS you, they'll do it anyway, not just accidentally by trying to crack a password.
This is all just rubbish anyway because nobody in this day and age bruteforces passwords anymore. Fishing, social hacking, wifi spoofing are much more profitable. The reason corpos use 2FA is because "that's what they've been told to use" by "security experts", and the reason they're told that is because they assume that every user is a 80 IQ monkey who uses the exact same account and password combination on every website and every device, so at least with 2FA you have less risks of some boomer crying to you that he lost his account. They want to save on costs yes, but not from API's being hit, but from hiring people to handle customers loses and complaints as well as recovery. This all comes at the cost of convenience for the average user. It's like being asked to register your ID when you want to buy eggs and toilet paper, because some people throw them on houses.

Video volume

Video muted

Loop video

Back | Go to board

Board:

/v/

Thread:

>Why is my steam account getting hacked.......AIIIIIIIIIIIIIIIIIIIIEEEEEEEEEEEEEEEEEE