Quick blog security things

Just did a few blog security updates.  From my end, everything looks and functions properly after the changes.  I was getting almost daily brute force attacks, so I did some additional security tightening, even though none of the attempts had managed to get through the measures already in place.

Make sure you remember your password, if you do have a username for the blog for some reason

( No real need for it, just post using your email and you don’t need to sign up.  Website login doesn’t carry over to the blog — it’s separate )

Reason being that I’ve locked down login attempts to 1 retry before a fifteen minute lockout.  A second lockout results in a 24 hour lockout.

If they want to keep trying what they’ve been up to, they’re going to have to do it very, very, slowly ( and I’ll probably ban their IP after a couple of attempts anyway )

Still struggling to find the energy to write.  I’m just in one of those slumps again.  There’s not really much I can do about it when one hits other than muse on stories and wait for one to grab hold of me so hard that it jump-starts me.

Share