Might as well ban all the ip's in my dynamic ip range, my universities range, rootshell.be, open proxies, tor nodes,

I estimate about 2^18 ip's (this does imply you also annoy genuine people using these ip's)

because when I come across a password from someone, I'll sure as hell test it against this database.
Even if you ban the above mentioned 2^18 ip's. I'm sure with some effort i'll still do it.

I believe this "though talk" is:
1- pointless _well it doesn't scare me_
2- gives yourself a hell of a lot to do
3- provocative
4- if the "attacker" knows he needs to watch out for log snorkling, he will circumvent it.

If you want to protect your sign in procedure:
- don't use a weak username/password scheme, use certificates, or other advanced techniques
- limit the amount of tries allowed
- enlarge the time between password tries exponentially
- ...

Just a heads up. So you don't need to go snorkeling through the logs for poor little old me.

well rhican, I think Inferno knows that ... (even I know it, and I think Inferno does know much more about computers than me)

I think he wanted the people who try to hack others accounts to scare ...


nice idea ... i'll use this in my login systems

.

No offence, but I think that news article may have been aimed at the sort of person who is leaving an obvious trail. More of a warning to scriptkiddies which is normally enough to scare the dim ones away.

Of course, if he was chasing you (and I am not insinuating this is you ) I very much doubt log snorkling would catch you. It might be enough to deter some and at least it shows they are doing something.

I may have it all arse about face but that's normal for me

Carry on

Very cunswuppious.

One of the reasons to choose different passwords for different sites/applications.
doing this is not nice.

.

Yes, i also noticed the sentence "It is not nice" is very ambiguous and can be interpreted in many ways after i posted that. I decided its up to the readers to think about what is not nice.

For me its not nice to use other people accounts.
Searching for a weakness is ok for me, as long as you dont abuse it.

I couldn't agree more

what does cunswuppious mean?