>>16601People said dictionary attack, and sure while a dictionary attack inherently has possible answers that aren't checked, many imageboard might have a /j/ or /z/ or /test/.
Additionally, like you said in
>>16602 , it could be publicly indexed. I found a secret press login subdomain for a television channel through shodan.
>>16588This, it's how most people find /dead/.
THIS THREAD IS PROBABLY HOW PEOPLE ARE FINDING /DEAD/.>>16589This.