I have a common four character name as login with Apple’s developer connection.<p>I regularly get locked out (and have to request a new password) presumably because other users try to login to my account (not remembering their real login).<p>This scheme sucks! Perhaps a better scheme would be to ban the IP for 10 minutes after half a dozen failed logins.