4 ms·
Well obviously, but you couldn't do a brute force attack like this to a specific account.
by mariorz 17y ago
Well obviously, but you couldn't do a brute force attack like this to a specific account.
- e1ven 17y agoI believe the implication is that you'd have a sessionid. Effectively, the username and password rolled into one unique number, stored in the cookie.
- dfranke 17y agoI think by 'specific account' he means 'chosen account', in which case he'd be correct without more targeted social engineering.