I haven't used pennywise, so I can't compare the two but I am very happy with strongbox. It seems like we get a brute force attack one a week and StrongBox always does the trick.
I want what every other man wants, I just want it more.
I haven't used pennywise, so I can't compare the two but I am very happy with strongbox. It seems like we get a brute force attack one a week and StrongBox always does the trick.
Thanks for all the replies, what about password sharing protection ? Pennywise seem to do a pretty good job. What about Strongbox ?
StrongBox logs the time and ip addy everytime someone logs in to your site. It will disable usernames if they log in from multiple ip addresses within a certain time frame. If your info shows up on a password site it will catch it pretty quickly and disable the info. That has been my expereince with it.
I want what every other man wants, I just want it more.
After testing both I would say neither. Strongbox is harder on the server than PW. It (SB) consumes up to 2% of the server's resources for each instance called. Constant bombardment at anything more than 0.5% for each instance called can render the box useless to everyone invloved. Especially when you start seeing 100+ requests per second. Pennywise on the otherhand misses alot things. If SB used less resources it would be more attractive.
Comment