News for hackers. Stuff that matters.

A comment on “Invalid Username or Password”: a useless security measure. Parent comment

Re:“Invalid Username or Password”: a useless security measure by TheMaskedCoder on Wednesday November 23, 2022 @09:56AM (#33719860)
Agreed. OWASP now advises developers on how to avoid account enumeration, so this take no longer makes sense.
[ Parent | on HN ]

There are no comments on this comment yet.