Take into account dates in different formats
Opened this issue · 0 comments
ravisorg commented
And when detected, calculate brute force time with that knowledge (or just mark it as zero cost, assuming the date is somehow relevant to the user and that the attacker knows some info about the user).