News for hackers. Stuff that matters.
Re:Credential Stuffing by jaratec on Thursday October 16, 2025 @09:15AM (#45604945)
> Do you mean a username that is distinct from email or phone number?

No, he means a unique user id, generated by the server when you sign up for the service. Then for every login attempt, you provide the username/email + user id + password.

Re:Credential Stuffing by mooreds on Friday October 17, 2025 @06:28AM (#45615058)
Thanks.

Would love to hear from other folks who have implemented this on how it affects the user experience. Seems to me it'd be high friction.