Skip to content
This repository was archived by the owner on Apr 15, 2020. It is now read-only.

Persist number of login attempts to prevent brute-force attack#182

Open
mgod wants to merge 13 commits into
omadahealth:masterfrom
splitwise:master
Open

Persist number of login attempts to prevent brute-force attack#182
mgod wants to merge 13 commits into
omadahealth:masterfrom
splitwise:master

Conversation

@mgod
Copy link
Copy Markdown
Contributor

@mgod mgod commented Jul 9, 2018

Close #178.

Currently, an attacker can bypass the limit on passcode attempts by trying N-1 passcodes, then killing the app. This PR saves the number of attempts to disk so that killing the app will not reset the number of passcode attempts.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants