Quote:
Originally Posted by Jim
I often wondered why a simple script that looked at logons and passwords and ip addresses wouldn't be a lot cheaper than any other type of software. If the same logon and password was used by 3 different ip addresses in a 24 hour period, that logon and password would be deleted. Simple, Cheap and to me anyway, looks like it would work fine.
|
That's exactly part of what proxypass does along with protecting from bruit force attacks.
It actually changes the password.
You can't stop there though.
The real owner of that password needs to be notified of the new password. Finally we have that process automated as well.
Otherwise you need to have someone on it 24/7 or you end up with unhappy customers as 99% of shared passwords are not shared by the owner.