It's easier in that it's just an email and will probably be free. It's harder because it couldn't be a targeted attack and would need to rely on the failure of

It's easier in that it's just an email and will probably be free. It's harder because it couldn't be a targeted attack and would need to rely on the failure of the people handling the request. But failures happen... constantly.