Originally Posted by
GW McLintock
Something I noticed today (and I may have noticed but never thought more about in the past) is that when logging in, if you use the wrong password, there seems to be no limit on login attempts. This is to say that you could try logging in 5+ times and it will never lock you out. This is basic cybersecurity protocol and the fact that they don't do this is kind of scary.
Will it actually let you log in after 5 attempts? Some sites will keep showing a generic "wrong password" message even though you've actually been locked out -- which I think could be considered a more secure approach. If not.. yikes..