2 ms·
This reminds me the #1 tip of web development: Never trust the user. I can't imagine there is a person out there who has all the time in the world to brute forc
by shubhamjain 13y ago
This reminds me the #1 tip of web development: Never trust the user. I can't imagine there is a person out there who has all the time in the world to brute force accounts with common phrases with 40,000 proxies (or whatever). Seriously, is there anything worth gaining if you get hold of even say 100s of accounts.
- Wingman4l7 13y agoWell, first of all, it's very likely they used a botnet and some automated attack software. Secondly, there was a financial incentive[1] -- my back-of-the-napkin calculation was ~$15-25 per compromised account. That of course is ignoring secondary values like API keys, reused passwords allowing access to accounts on other sites, etc. [1]: https://news.ycombinator.com/item?id=6766293 https://news.ycombinator.com/item?id=6766293
- gambler 13y agoYou can spread malware through Open Source projects.