If the cracker gets to send a couple million requests per victim, I won't be surprised if she manages to crack passwords of many users. Blind brute force is def

If the cracker gets to send a couple million requests per victim, I won't be surprised if she manages to crack passwords of many users. Blind brute force is definitely not the sharpest knife in the drawer; Dictionary based attacks might prove much more powerful when it comes to cracking average Joe's password.