And to further reduce the search space, while SSNs don't have a checksum they do have "strong formatting" which means certain combinations of numbers are invalid. If you're down to just 2 digits (100 guesses) and apply those rules, you've pretty much got the number.