> In one of our systems we’ve seen customer guess at other accounts by just incrementing the sequence. What can they do with that guess? A sensible access cont

> In one of our systems we’ve seen customer guess at other accounts by just incrementing the sequence. What can they do with that guess? A sensible access control would not even let them see if the account is active, cancelled, or invalid.