Re:“Invalid Username or Password”: a useless security measure
by tumetab1 on Wednesday November 23, 2022 @09:11AM
(#33719279)
This might need (2014) in the title
[ Parent
| on HN ]
Re:“Invalid Username or Password”: a useless security measure
by TheMaskedCoder on Wednesday November 23, 2022 @09:56AM
(#33719860)
Agreed. OWASP now advises developers on how to avoid account enumeration, so this take no longer makes sense.