How can a hacker try many multiples of possible passwords...

[thatdemguy]

1. What you said it true, but most also have a lock time out.

Be it 1 or 5 mins you do get more tries on most systems.

What they really do is go after systems that dont lock it it. They then make a list of common passwords used by an email address and then start trying them on other sites.

So your forum you go to read about puppies does not lock it out, they get the password for that site. Then they start trying it on say wells fargo and citi bank etc. They dont need to know if you have a wells fargo account they just try it and every other bank. Most people who are not computer savy will have a few passwords they use a lot of places. Or variations of those passwords, like a place that requires 6 things and another place requires 8, a lot of people do things like add 12 to the 6 digit to get 8.

I am some what guilty of this, but use better variations.