No more phishing

  • Choose
  • Lock 04

Difficulty 2 of 5

Attackers run a look-alike admin console that passes each sign-in to the real one as it happens. Others hold old admin passwords and take over phone numbers. Pick the second sign-in step for 40 admins. Allow 0 attacker sign-ins. Keep admin p99 under 1 s.

Play level

Options

  • Text message codes
  • Authenticator app codes
  • Passkeys
A token bucket on guessesDrag or use arrow keys to change the limit

Goals and limits

Throughput (Relayed)
none
Throughput (Swapped)
none
Availability (Admins)
at least 99%
p99 latency (Admins)
under 1 s
Monthly cost
under 40 USD/mo
Traffic
2 req/s

Concepts

How players did

Player results load from the server.

All levels