Re:Don’t Get Clever with Login Forms
by nickles on Friday February 15, 2019 @12:31PM
(#19172821)
> That's a security failing - you shouldn't let the website user know that a given account exists.
It's not an issue if you let users pick their own username. There's simply no way to get around this (apart from assigning usernames). In other cases, usernames being publicly available is a desired feature.
It's not an issue if you let users pick their own username. There's simply no way to get around this (apart from assigning usernames). In other cases, usernames being publicly available is a desired feature.
[0] https://imgur.com/a/qCupYyQ