3 ms·

It's even worse — you've correlated a particular IP origin to a weak password. Now you still have to figure out the account to even begin guessing. I guess thi

by stouset 10y ago

It's even worse — you've correlated a particular IP origin to a weak password. Now you still have to figure out the account to even begin guessing. I guess this is the flip side to marketing of bugs like Heartbleed. Now people are starting to use the same approach for trivial nonsense.

foota 10y ago
True, but it might not be that hard to find a user's gmail address given network access. For instance you could get it off a site where the user's email address is sent over http.
- stouset 10y ago
  Agreed, but the level of self-inflation around the severity around this "bug" is shameful.