Correct password is instantly recognized

>correct password is instantly recognized
>needs a moment to think about an incorrect password
what does macos mean by this?

Attached: macoslogin.png (1200x750, 165.67K)

Same with Linux and Windows

Attached: 1658625668429.png (1200x1700, 1.26M)

it ain't every day I see a stupid post on Any Forums. wait, yeah it is.

1. Prevent brute-force attacks by exponential backoff, increasing that "moment to think" with each incorrect guess
2. (only applies to networked accounts) Password doesn't match the last-known cached password, but maybe the user changed their password on the central server, so we need to wait and check via the network first before reporting the result.

>10th incorrect password
>have to wait 5 years
>criminals/fbi give up
it's genius, really

they would probably make an offline backup before going the bruteforce method, then restore it.

More like John Applesneed

Yes obviously this only prevents quite unsophisticated attacks. But I think it is better to implement than not.

It's that way by design. It's supposed to make password attackers impatient enough to give up.

This phenomenon occurs in lots of places. I always assumed it was doing something to the effect of recomputing the hash in case there's been a bit flip and/or bypassing the cache just to be sure.

Or they could just reboot the machine into secure mode, delete the "AppleSetupDone" file and create an admin account. It's so incredibly easy to break into a mac, it's not even funny. But still they have an image of being secure

>type wrong password in linux cmd
>have to wait a few seconds for prompt
>unless....
>ctrl-c
>instantly can try again
>????????
my exprience both local/su and remote ssh logins do this

*installs fail2ban*

Formerly John Applechuck

it's ghetto rate limiting

why would i install some dumb ubuntu reddit software on my own pc

you must be 18 years old to post here

that's any computer without FDE dumbfuck

on local machines this has no effect, but on services like ssh it does.
because with that you can't guess if user account exists or does not exist

You can do that to any OS that doesn't have its disk encrypted.
Which is why every OS has disk encryption.

99% of macs have FileVault enabled faggot