The URL included the serial number (with 8 million-million-million-million possibilities) plus a 4-digit code (65536 possibilities), but a lot of tech reporting these days is a giant game of telephone so many article did incorrectly say that there were only 65536 possibilities.