I feel like I'm in a timewarp here. Your question could almost be considered "legit" if you asked it several years ago, back when the Internet was more like a wild frontier. Today, with the rise of organized crime on the 'net, the multitude of script kiddies, etc. it's more like a war zone. With all of the zombie systems out there on the 'net a distrbuted brute force attack would likely be fairly easy to pull off (especially if you throw in IP spoofing and the relaxed restrictions proxy servers would force you to make on how often an IP address can hit your server). These days you should be much, much more concerned about privacy and security, not less.