there are so many ways
what i do:
1) email adress as login... they can't choose the login
2) scan boards and irc for passes of my own sites
3) stop multi logins and check for accessing countries on the usernames
that pretty much keeps everything unwanted away
most people know shit about security whereas other sites have damn awesome scripts running!
|