About that. Let's just consider that for a moment. First, it is much easier to create a hundred new accounts than guess one password. Second, suppose you guess one. There are two possibilities. Either it is some troll's account or someone's respected. If the troll, no one would take the spam seriously. If respected, no one would believe it is genuine. Either way, it is a complete waste of time.

I suspect it is more about password reuse. Suppose I want wicket's eBay password. I could try to log in to eBay as wicket but I would very quickly get kicked out. So I try about 50 other websites first. If I get 5 attempts on each, that gives me 250 attempts. Disposable forum websites like TMO that no one cares about are the best for this purpose