|
There is a lot of this about at the moment, the theory is that someone takes a forum username, tries to brute-force the password and if they get that then they check the profile for the e-mail address and hope the password is the same. Obviously with the e-mail password its an open door to identity theft.
We have taken steps to now count the number of password attempts and if there are more than a certain number within a certain time we ban the IP address from accessing anything on the server.
We have also taken steps to ban entire countries based on IP address lists.
This is in addition to our normal anti-spam protection and other measures we take to try to ensure safety and privacy for our users.
If anyone has any queries feel free to send me a PM.
|