[InfectedMachine]

You make a good point about this and like you said, it really would make more sense to have the codes available offline. It will be tough to say until I can get some data gathered of peoples Disa numbers, successful activation codes, and other information so I can see if there is any patterns. I thought I remember seeing that some people were originally having some of the same codes with some of the first nextbooks that came out with this activation lock. I could be wrong on that so ill have to do some digging. Even if they were it could have been changed since then considering the major changes they have made to stop this.

it is entirely possible that there is overlap in the codes. 6 digit codes are limited to 1 million variations. Additionally, Bcrypt has overlap in hashes. Example provided below:

$2a$04$45Qd8ZmCM/vJaT/K0U5ERu2eZgROhf.jtyF9RKVulnBf3d7yEeXj6 = code 321456
$2a$04$bftqdnQxLfwnhr3lAu16ceG9vr/6xas7KOfvs4E1G3PMcDQTdV5vG = code 321456

How many devices have been sold using this method? I imagine its probably beyond 1 million. So they have already reused codes. While the codes are the same, the hash is different. Which would be more than enough to prevent problems activating devices or keeping track of devices.