Schwim Dandy

  • 0 Posts
  • 34 Comments
Joined 3 months ago
cake
Cake day: March 28th, 2024

help-circle















  • I do this for part of my reg forms. I split the reg process into two parts. First, supply email only. This element uses an obfuscated id. Once they do that, the link sent to their email leads to the rest of the process, using no obfuscation. This should keep from breaking password managers.

    Regarding login bruteforcing. I give them 3 shots then a cooling down period.

    This process has resulted in a 0% success rate for bots so far. We will see how it holds as the domain sees more traffic.