What are you doing to stop bruteforcing
 

for all the talk of how many sales are lost due to free content on tgps, i find this issue ignored. in the biggest 10 password trading boards, litterally thousands upon thousands of logins are posted every single day.

seriously, i have only seen 3 successful attempts at blocking bruteforce attacks: what hawg is doing:
http://www.shemalemistresses.com/enter_members.php?r=1

so simple, but speaking from experience, it's impossible to crack using the conventional tools (which 85% of all crackers will use)

the other site is overdevelopedamateurs.com- the IP is blocked after 1 unsuccessful attempt for 1 hour. mind you, most attacks are done using an anonymous proxy, but i have never seen this site's passwords traded, even after repeated requests. so it must work

another way is to use a secure login page (https)

those of you using Pennywise must remember you're still leaking bandwidth like crazy. besides, you're not attacking the problem at the root: your passwords still get compromised.

so let me ask: what's stopping all the other guys from implementing something that hawg has done. i'm sure you will save shitload in bandwidth costs, while the sales for those sites will go up as no one will be able to get in for free. i realize smaller sites may not be able to afford something more elaborate, but what's stopping the big guys?

carbon

Having anti-bruteforce as strong as you do, you will prevent legit customers from getting in sometimes, which will result in chargebacks.

That's why some places chose that it's not worth running that type of protection at all.

I think Pennywize and other programs of this type, like our Protector Pro is the best way now.

using lube ;)

how much is it worth to you?