Well obviously, but you couldn't do a brute force attack like this to a specific... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mariorz on June 3, 2009 | parent | context | favorite | on: How I Hacked Hacker News (with arc security adviso...

Well obviously, but you couldn't do a brute force attack like this to a specific account.

e1ven on June 3, 2009 [–]

I believe the implication is that you'd have a sessionid. Effectively, the username and password rolled into one unique number, stored in the cookie.

dfranke on June 3, 2009 | [–]

I think by 'specific account' he means 'chosen account', in which case he'd be correct without more targeted social engineering.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact