Preventing brute-force attacks with django(bruno.im)
bruno.im
Preventing brute-force attacks with django
http://bruno.im/2011/nov/22/preventing-brute-force-attacks-django/
3 comments
fail2ban is good for this as well
That is an issue. But a more significant issue is Django's vulnerability to timing attacks.
I'm not aware of any timing attacks against Django.
If there are attacks that we should be aware of please be a good open source citizen and report them to `[email protected]`. We take security reports very seriously, and want very much to fix any issues that're disclosed!
[edit to clarify: I'm one of the lead developers of Django, and one of the members of the security team that gets emails sent to the `security@` alias.]
If there are attacks that we should be aware of please be a good open source citizen and report them to `[email protected]`. We take security reports very seriously, and want very much to fix any issues that're disclosed!
[edit to clarify: I'm one of the lead developers of Django, and one of the members of the security team that gets emails sent to the `security@` alias.]
Doesn't using bcrypt help with that, or do you mean something else?