>Try to see how many tripcodes you have to try before you find a collision.

865 before the first collision, 1059 before the second, using random tripcodes...
brute-forcing a specific tripcode would still be somewhat difficult because this takes a bit longer than using crypt()... about 16 times as long on my machine...