• dmention7@lemm.ee
    link
    fedilink
    English
    arrow-up
    41
    ·
    2 months ago

    If your goal is to access a random account as quickly as possible, why would you ever try anything other than the next most common PIN?

    It’s not like Vegas where longer odds = higher payout. Less common PIN just means any given account is less likely.to use it, and therefore it’s less likely to be correct on any given attempt.

    If you look at it another way, the brightness of each square on that grid is the probability that there is a prize inside. If you wanted the most prizes as quickly as possible, picking the darkest avsilsble square is always a bad choice.

    • apotheotic(she/they)@beehaw.org
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 months ago

      If you have some degree of knowledge about the target, and know they are somewhat security savvy (but also somehow only have a 4 digit pin protecting this account) then it might be wise to check the pins that would be considered more secure. Or, at least, to perform some data processing on the source data for this graph which culls stupid pins (and remember the ones you cull to add to the end of your brute force approach), and from there continue with the highest probability.