status

Occurred to me in the gym that I could seriously play with a brute force password checker – poison the search by giving temporary access, but handle it inside a sandbox or waiting room – i.e. make it think it has found the password – this would be very unexpected. An experienced hacker would be surprised that he got in so quickly. After how many attempts should I allow this temporary pass?

A distributed attack will obviously make the machine fall over, and those logs would be very large, so the attempt is scuppered because the hardware cant handle it. Nevertheless, its a thought – if you have someone constantly banging on your door, why not let them in.

Once they are “in” – what do you do with them?