Virgin Mobile leaves six million subscriber accounts wide open
I simply don't understand how brute-forcing can remain a problem today. It seems like such a trivial implementation detail to freeze account access after a certain number of incorrect attempts – and yet most password security guidelines still warn against what they consider brute-forceable passwords.<p>Could a security professional explain in non-domain-expert terms why this practice isn't simply adopted everywhere?