[jsmeaton]

Yes. In this case the denial of service is against specific customer accounts for the lockout duration, not against the availability of the site.

[jessaustin]

This would be bad, but what's the motivation? What fabulous prizes await the DOSer of some random account on your service?

[jsmeaton]

Locking users out of their accounts isn’t the goal, it’s just an unfortunate side effect.