But would not an attacker then have to know the exact minute that you froze your... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

		usaphp on Sept 9, 2017 \| parent \| context \| favorite \| on: Equifax Faces Multibillion-Dollar Lawsuit Over Hac... But would not an attacker then have to know the exact minute that you froze your account on? If you have only a few tries to unlock your account - how would attacker possibly guess it?

warent on Sept 9, 2017 [–]

525,600 possible pins for a whole year is staggeringly tiny.

1440 tries max if you know the day. 720 if you know if it was day or night. Botnet and/or proxies can do the rest

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact