I'm surprised a site such as TechCrunch didn't have more parameters in place, they must get thousands of brute force attempts every day so surely a simple noCaptcha reCAPTCHA at least should have been implemented.