• @cheese_greater
    link
    32 months ago

    I wonder if its mostly for simple PIN-passcode types…

    Think about it: if they have some bullshit way to disable the anti-replay whatever, its only a matter of time till you iterate to the correct numerical passcode.

    Its like Michael said to Jim and Dwight, its not about more or less money, the amount is just different

    • @[email protected]
      link
      fedilink
      62 months ago

      From what’s known most of the attack vectors involve brute forcing the passcode and the vulnerabilities allow it without rate limiting/anti-replay.

      So you’re at least much better off with a long alphanumeric passphrase.