🚀 go-pugleaf

In article <mumble>, dave@lacerta.unm.edu (Dave Grisham) writes:
|> Does any site lock accounts that their password guesser guesses? --grish
|> 

If our password guesser guesses a password, we send e-mail to the user
and strongly urge that they change the password immediately.  We give good
password guidelines in the message we send.  We check the password a
week later.  If it has not been changed we change the password for
them.  They can then go pick up their new password. (We have a system
that generates account information pages that are kept in a controlled
area and only given to the identifiable account owner.)  This doesn't
really constitute locking the account, but if a user ignores the
change password e-mail, they will discover one day that they can't
login until they go get their new password.

-- 
Joseph A. Watters, Jr.		jaw@owlnet.rice.edu
Deputy Director, Owlnet
Rice University
Houston, Texas