Originally Posted by APN Philip

Thanks for your thoughts. You're right, if your server was compromised, it really doesn't matter what you choose for a username. So you have to make it harder to bust in to the server. I mean we still see some brute force attempts from time to time and thus my inclination is to make it twice as hard to guess the user/pass. Or is that not a correct way of thinking?