> However, phone hashes are sent, not clear ones. A 10-digit number is only 10 billion possibilities, much less if you consider that they aren't completely ran

> However, phone hashes are sent, not clear ones. A 10-digit number is only 10 billion possibilities, much less if you consider that they aren't completely random and have area codes, etc. You can probably brute-force a hash of a phone number in seconds to minutes _on a CPU_.