Password sites question
 

So I was looking to see what pages were currently indexed in Google, and who is linking to me...and I came across a couple password site messagebaords in the results.

After a few hours of digging around those passwords sites... I noticed a couple of common responses. A surfer would request a password to a site...and the cracker would reply "sorry...its Ibill without the 900 option".

Can anyone tell me "what do I need to know about web900 and security issues?" This has probably been covered in a past thread that I missed...but thanks in advance for any insight shed on this topic.

Respectfully,

EA

If you can guess a valid pincode it should be easy to get access

It would probably try and brute force every possible pin code trying to get access to the site (which for a program could be a couple minutes)
ZoiNk

Thanks for the responses.

EA

There's an old misconception in the cracking community that iBill sites that don't use web900 assign user passwords and therefore cannot be bruteforced.

ea,
if you're worried about brute force attacks, proxy based attacks, etc., check out http://www.proxypass.com
:thumbsup

PxG