Email account under attack

[ZakMcKracken]

The 46050 guesses is based on the number always changing after each guess. Otherwise it would be even easier.

[licquorice]

I guess you didn't read my post 23

[ZakMcKracken]

I did read it. You seem to make 2 points. The first was to limit the amount of guesses before being locked out, while the other was based on the likelihood of people being able to guess the number. I responded to the second part. I do agree that it would be a good idea to lock out the hacker after a few attempts. We made a similar suggestion to BT a few days ago.

[licquorice]

The point I made is the number of guesses is not pre-determined as you suggest if not all the numbers are used.

[WSH]

Hey?  Assuming they use every number between 0 and 9,  from 0000 to 9999, that's 10x10x10x10 combinations or 10,000!

[ZakMcKracken]

Thanks for clarifying. The fact that not all numbers would be used makes no difference, as you make random guesses. If anything, it could make things easier depending on how this is determined, but certainly not more difficult. You would guaranteed have a 99% chance to guess the correct number after 46050 guesses. Obviously these guesses should not all the time be the same number.

[licquorice]

But as I keep saying, unless all all combinations are used, it's not that simple. You could keep hammering the same number for 10,000 times but if it isn't used you won't get in.

[licquorice]

@ZakMcKracken 

This is how it works.

If the same number is used every time the hacker just tried every number until they get in.

If a different number is used every time the hacker  uses the same number every time until they get in.

If not all the numbers are used, neither approaches work.

[ZakMcKracken]

You simply don't pick the same number 10000 times, but make random guesses.

[licquorice]

Exactly, random guesses are not a pre determined number and are extremely unlikely to strike gold.