As long as you do not have common/easy to guess passwords there is nothing to worry about. The vBulletin lock-out system more or less makes brute force almost impossible.
That said you'd be surprised how many accounts they can find simply by trying the 5 or 10 most common passwords (including the username as the password.)
A site like VB.org with tens of thousands of users if they try a hundred users they can probably get 2 or 3 accounts.
It's all percentages.
|