1.While session identifiers aren't likely to be guessable, it may be possible to obtain session identifiers through other means.
虽然会话标识符不可猜测，但也可能通过其他手段获得会话标识符。
2.In other cases, the bad guys apparently scan for accounts with easily guessable passwords.
而在其他情况中，坏蛋们显然是扫描那些密码简单的账户。