The intruders can take dictionary attacks on them and then impersonating legal users to access resources which only members have.

• 攻击者可以利用字典攻击取得通行码，进一步地假冒合法使用者来存取只有会员才拥有权利读取的资源。