Alright, enough.
Firstly, we're not going to discuss M4C site security in an open forum.
Secondly, the reason some people are getting failures, and not others, is because you may be unlucky enough to share an IP address, or range, that is attempting to slow the site through DDos, etc.
Thirdly, the internet is a risky place. A password can almost always be compromised quickly, assuming you have unlimited access to continue trying. More characters, and more symbols makes it much, much harder especially when the crack only gets three shots at it, then a 15+ minute timeout. Not foolproof, but then again it adds to the levels of security.
Lastly, using unknown IP addresses, and then entering data in those addresses can take an MIT generated, 100 character password and give it away. Worrying about what security we have in place for M4C when you are willing to navigate unknown IP addresses and enter usernames and passwords there is ironic, to be completely frank.
So for now, this thread is done. If our staff has any salient updates, we will post them. Otherwise we will continue to ferret out the issues, and sources, of the cyber attacks.
"I'm not saying I invented the turtleneck. But I was the first person to realize its potential as a tactical garment. The tactical turtleneck! The... tactleneck! - Sterling Archer"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Courage is not the absence of fear, but rather the judgment that something else is more important
than one's fear. The timid presume it is lack of fear that allows the brave to act when the timid do not."
Bookmarks