easy to brute force with long numbers