Are you referring to the 2FA problem I had? I brute-forced it with a simple Bash script utilizing Lemmy API. Our instance doesn't seem to have rate-limiting.