Pattern of the whole program
Thursday, February 24, 2011
5:23 PM
Pattern of the whole program
Determine vulnerable users, delete other records. 
Compute whitelist of sites, delete from user records.
For each site, compare the earliest successful login with the number of unsuccessful logins before it. 
If this is >0, it is likely that the account is cracked. 