News for hackers. Stuff that matters.
Re:“Username or password is incorrect” is bullshit by testvox on Friday December 22, 2017 @10:05AM (#15987898)
Which is why they shouldn't leak this information on the registration page... Instead they should pretend the registration always succeeds and then disallow login until the email has been verified.
Re:“Username or password is incorrect” is bullshit by gozur88 on Friday December 22, 2017 @03:10PM (#15990521)
That works for the email, but not the user name. Going through the entire process and then telling the new user "That one's already taken, please start over" is not going to make people happy.