News for hackers. Stuff that matters.

A comment on Don’t Get Clever with Login Forms. Parent comment

Re:Don’t Get Clever with Login Forms by reificator on Friday February 15, 2019 @12:04PM (#19172550)
I haven't heard an update on that front for many years, so I'd assume it should still be a concern.

Many of the same sites that do this will also have a recovery form that refuses to leak information.

[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by etxm on Friday February 15, 2019 @12:10PM (#19172614)
That’s important. I find it funny[1] when you get the “email does not exist” error on a password reset page.

[1] by “funny” I mean not funny

[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by reaperducer on Friday February 15, 2019 @12:52PM (#19173019)
I wonder if that's a way for spammers to harvest known good e-mail addresses.
[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by scarejunba on Friday February 15, 2019 @01:32PM (#19173423)
Those are available for free on the internet dude. This is a non-concern. The bad guys don't listen to GDPR. There are entire email lists available.
[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by dbdjfjrjvebd on Saturday February 16, 2019 @12:57AM (#19177320)
And how are such lists constructed?
[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by scarejunba on Saturday February 16, 2019 @02:24AM (#19177541)
You just breach someone with a lot of them.
[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by dbdjfjrjvebd on Saturday February 16, 2019 @10:28AM (#19178972)
Would it not be easier/more legal to scrape them using leaky login forms?
[ Parent | on HN ]
Re:Don’t Get Clever with Login Forms by scarejunba on Saturday February 16, 2019 @05:02PM (#19181215)
I believe the breached lists rapidly become public. You can find them on the internet.
[ Parent | on HN ]