You can brute-force everything, and since usernames are public and passwords often guessable, I bet you can hack some accounts on most websites. Also I'd be sur

You can brute-force everything, and since usernames are public and passwords often guessable, I bet you can hack some accounts on most websites. Also I'd be surprised if they didn't ratelimit you in a way that make such bruteforce attacks infeasible. If we'd start to report all such vulnerabilities, we can fill up three pages of news with it every day...