Why does brute work on sites with limited authentication attempts?

Question

brute force

often seen in serials, where +/- there is a plausible description of the activities of hackers, that they use brute force passwords. How? After all, if you make attempts to authenticate through the site, then after several unsuccessful attempts, authorization from a computer with these parameters may not be possible at all, even if authentication and identification are successfully passed.

Answer 1

1) Don't believe TV shows
2) Not everywhere, but on some sites, although quite well-known, there is such a thing that can be considered a kind of vulnerability. And specifically, consider, for example, the case when, for 3 consecutive unsuccessful login attempts, a temporary block is given. Often there can be a "vulnerability" that if two failures, and 1 successful, then a temporary block is not given. Although this is not everywhere, but thanks to this, Brutus can be arranged. Just do every 3rd time login with successful data, i.e. Even your recently registered acc will do.