MyTurtleSwimsUpsideDown

> emerge pussy —deep —pretend

Not through my scalp or soles.

Vinegar mommy: Oh honey. I am gonna transform you!

Counterpoint

Agreed, and also makes it readily known that that is what you are doing.

The sneakier more user friendly way to implement it would be to require the second correct attempt only if the user has made an incorrect attempt since the last successful login.

It rejects the first [correct] login attempt (it’s worded poorly). It assumes that a brute force attacker will try any given password once and move on, while a human user will think they made a typo and try again. This works until the attacker realizes that it takes two attempts, in which case it merely doubles the attempts required to breach the account, and simply requiring an additional password character would be vastly more effective.

Worms don’t eat dirt. They eat detritus and poop dirt.