Psychotext
Member
I think you're missing the point of an automated brute force attack. It's about as much effort as 20 lines of script, some proxies and a database full of email addresses.Doesn't the amount of time/effort involved make that a little futile?
Even if it doesn't, it doesn't explain the number of people who were 'hacked' and were claiming both password and email address were entirely unique and not used elsewhere.
As for the latter. If there were people saying their email address was completely unique (as in, only used in one place) then I don't remember many of them saying it, or any at all for that matter.