article
A login lockout that counts by address and punishes the whole account
Rereading the login lockout on my staff scheduler showed it counts wrong passwords per address, locks the entire account, never ages old misses, and only real accounts ever see the locked answer.
Read more