Hacker News new | ask | show | jobs
by NonNefarious 1379 days ago
Mmmm, not really. First of all, they system generally DOES check to see if the account number is valid. After that, all it has to do (and generally does) is ask for another piece of correlated information.