News for hackers. Stuff that matters.

A comment on We'd lose our security certificate if we allowed pasting. Parent comment

Re:We'd lose our security certificate if we allowed pasting by jfoster on Tuesday May 06, 2014 @09:36AM (#7704319)
One bank that I'm not going to identify is particularly scary. Predictable account number (sequential, I think) + 4 digit PIN. Even if they lock individual accounts after X retries, nothing prevents a well-distributed botnet from gaining access to an account (on average) every 10,000 attempts.
[ Parent | on HN ]
Re:We'd lose our security certificate if we allowed pasting by zaroth on Tuesday May 06, 2014 @01:23PM (#7705832)
There was a recent post analyzing the distribution of 4 digit PINs, and using that I think it was something like 20 guesses would give you a 10% chance of access.
[ Parent | on HN ]