[JustSomeNobody]

Makes sense, nobody like slow pages. However, don't most people have the browser save their password? So couldn't the online retailer have some sort of exponential delay (to a limit) after so many failed attempts? Surely that would affect few real customers.

[wild_preference]

What is being delayed? Just an IP address or the entire account? Neither really work.