Quote:
|
Originally Posted by Vick
One more time
That is possible
It is also possible someone ran a script that does nothing but try username/password combinations until they cracked an access
There are a few software programs that were built for nothing but hacking accesses to membership sites
When these acesses are compromied they often are posted to password sites
Another good thing that Pennywize does is limited the amount of time an IP can try to enter the site with wrong/random username/password combinations
I'm not taking the users side, I'm telling you it may have not been their fault
Especially if the username/password was something simple like apple/orange
|
You need to listen to Vick. There are a bunch of programs that password crackers use to find passes. Then there are a bunch of other programs to test the viability of those passes. Without protection your site is a cracker's dream. A member usually has no idea that their password has been stolen.
Pennywise is good and reasonable. If you're going to have a paysite, it's a must have investment.